Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM credential appears to have been reused from an unfamiliar client, with a brief identity check followed by broad account discovery and a privileged change. Identify the responsible principal, the MITRE ATT&CK technique that best fits the activity, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d320328-5a35-4014-b4be-02fe6926aeb6", "record_id": "flaws_cloudtrail:0000000:9d320328-5a35-4014-b4be-02fe6926aeb6", "row_index": 0, "timestamp": "2019-05-29T11:19:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d320328-5a35-4014-b4be-02fe6926aeb6", "eventTime": "2019-05-29T11:19:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWZHhJNFpCbHA0am5HVUNKa1IreEJtM3Q4clBCOG1HQWJET1U5V01WU2xsTm1MS2NHYUtRS05lVGJYdnFBWHh2YWtFNlNNWVJGTVhNYTI0bEFjbzNGcWI1WjVyR1U2QWdXMlBEZVpnejhUZkt1TkpuVFZYWkVzZE93MzA5eW5IT0FlWEMwRGJNMS9JWTdJTjdQMnJOQ0JueXNwWUg1ZWR0QXppM3Y1dGdaQ0xUNk1ZdGJ0QmlHM0dYczVXN2lrcmorMmNpQUQvM1ZRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "265ed748-fd0d-4b74-8f33-3f399f110627b", "record_id": "flaws_cloudtrail:0000001:265ed748-fd0d-4b74-8f33-3f399f110627b", "row_index": 1, "timestamp": "2019-05-29T11:19:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "265ed748-fd0d-4b74-8f33-3f399f110627b", "eventTime": "2019-05-29T11:19:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIWE5CTmtOT0JxUkVvQ1hLZGVidjJVN3loK1I3QmRTcGdvYmFCa2tCMm9kbGFTc0wxRldkZHVnNmN0Skp3TE5vSW5tOVFNVDJDNXViNktlSVh5bGJQTzlOcWowQklOdTdWMEtteHJoRzBnOU5nakxFdEJuVEg0TkhvUUxwQ010Sm81MG52NjRoTlVuSGhRbmJXaWFFeG1SYU9Mdkx2OTRXa0hiTlFJUHVTd3RwS0RaNTVUQ0J0ZFdiZWc4aXdZVDRLK0lDRU9rVHh3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "265ed748-fd0d-4b74-8f33-3f399f110627b", "record_id": "flaws_cloudtrail:0000002:265ed748-fd0d-4b74-8f33-3f399f110627b", "row_index": 2, "timestamp": "2019-05-29T11:19:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "265ed748-fd0d-4b74-8f33-3f399f110627b", "eventTime": "2019-05-29T11:19:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIWE5CTmtOT0JxUkVvQ1hLZGVidjJVN3loK1I3QmRTcGdvYmFCa2tCMm9kbGFTc0wxRldkZHVnNmN0Skp3TE5vSW5tOVFNVDJDNXViNktlSVh5bGJQTzlOcWowQklOdTdWMEtteHJoRzBnOU5nakxFdEJuVEg0TkhvUUxwQ010Sm81MG52NjRoTlVuSGhRbmJXaWFFeG1SYU9Mdkx2OTRXa0hiTlFJUHVTd3RwS0RaNTVUQ0J0ZFdiZWc4aXdZVDRLK0lDRU9rVHh3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90d4f86b-f6b3-46a9-b48c-cb02235d9a13", "record_id": "flaws_cloudtrail:0000003:90d4f86b-f6b3-46a9-b48c-cb02235d9a13", "row_index": 3, "timestamp": "2019-05-29T11:19:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90d4f86b-f6b3-46a9-b48c-cb02235d9a13", "eventTime": "2019-05-29T11:19:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnQ0s3SVZNVlh4TEw1VDFIOTBHTmp1TjZuUEdxOVY2K1BPc28vM01pUzV0NitvdVRwVkxEZlhoNUdLdEphWEhQNTNmZXRhdG92MEZxbUN6WE5LVFNJQjYvQ3VHT0JSdEZINlIyUmx3TW5rcHcrU2xwWTMwM2xLMXlBeEt1cU1POW9FL095cGx6ZzZLbDVtVEMxQXJsTFQvc0dIaWNWSjluYlUrbGR3MEdDWmRnV2lGY3lYOW5aNkh4TDN6aWY0ZFQyWm5zYTlpK2dpOU55dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90d4f86b-f6b3-46a9-b48c-cb02235d9a13", "record_id": "flaws_cloudtrail:0000004:90d4f86b-f6b3-46a9-b48c-cb02235d9a13", "row_index": 4, "timestamp": "2019-05-29T11:19:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90d4f86b-f6b3-46a9-b48c-cb02235d9a13", "eventTime": "2019-05-29T11:19:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnQ0s3SVZNVlh4TEw1VDFIOTBHTmp1TjZuUEdxOVY2K1BPc28vM01pUzV0NitvdVRwVkxEZlhoNUdLdEphWEhQNTNmZXRhdG92MEZxbUN6WE5LVFNJQjYvQ3VHT0JSdEZINlIyUmx3TW5rcHcrU2xwWTMwM2xLMXlBeEt1cU1POW9FL095cGx6ZzZLbDVtVEMxQXJsTFQvc0dIaWNWSjluYlUrbGR3MEdDWmRnV2lGY3lYOW5aNkh4TDN6aWY0ZFQyWm5zYTlpK2dpOU55dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea310cd7-5f61-4fbb-9fe2-292210e991f", "record_id": "flaws_cloudtrail:0000005:ea310cd7-5f61-4fbb-9fe2-292210e991f", "row_index": 5, "timestamp": "2019-05-29T11:19:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea310cd7-5f61-4fbb-9fe2-292210e991f", "eventTime": "2019-05-29T11:19:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3ZTJlUkhpZHNrbndtaUpwdVFOdHpodUJ3NHRxenVWcXNOOW5iZkR3aHcvYnFGajNweDFVK0dsOVhFZGZTNkpkUEtVUm9Yb0Z4dkx3eTVMVGhnTms0UW1yb2l5VXNMZnVLRks2TTZ3T2Nod21uZFJRVVJyRmpBa2NBTXg0VngyZzY0MStsL2FYTDZpdXlEV3NPSlhRUWtXbkgveTN2NWlaaWVoWVk5OE9CdUNINTBUUkhFbXEwR2hCMFc3RGxkd2RzTTlicit2UEhiTmt2dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea310cd7-5f61-4fbb-9fe2-292210e991f", "record_id": "flaws_cloudtrail:0000006:ea310cd7-5f61-4fbb-9fe2-292210e991f", "row_index": 6, "timestamp": "2019-05-29T11:19:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea310cd7-5f61-4fbb-9fe2-292210e991f", "eventTime": "2019-05-29T11:19:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3ZTJlUkhpZHNrbndtaUpwdVFOdHpodUJ3NHRxenVWcXNOOW5iZkR3aHcvYnFGajNweDFVK0dsOVhFZGZTNkpkUEtVUm9Yb0Z4dkx3eTVMVGhnTms0UW1yb2l5VXNMZnVLRks2TTZ3T2Nod21uZFJRVVJyRmpBa2NBTXg0VngyZzY0MStsL2FYTDZpdXlEV3NPSlhRUWtXbkgveTN2NWlaaWVoWVk5OE9CdUNINTBUUkhFbXEwR2hCMFc3RGxkd2RzTTlicit2UEhiTmt2dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a65f11cb-e66c-4c4a-9520-6b00f8b18e57", "record_id": "flaws_cloudtrail:0000007:a65f11cb-e66c-4c4a-9520-6b00f8b18e57", "row_index": 7, "timestamp": "2019-05-29T11:19:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a65f11cb-e66c-4c4a-9520-6b00f8b18e57", "eventTime": "2019-05-29T11:19:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGVDNabm5SbVQzem9TN3RSU3pUclY1NkNxZjl6Y2NFWDFsNVBUb2ZMaExIb0ZGM0c5UlpLb0o1V3BuSWJuOUF5V3VnMVNvL0pOcU84Z1lYb1cxZ2M5RE5ER2NNMTc4akFpdDRQOFRaMVd3MXFjTnVPSzlacXhtejlOekliRG5taksxY2tEeW1BTUN1K1JUaDkreFZRejEyU25hRjF5VUZvbTdpYS80OTJycGdlSjBsRGRyNFduWXo2TmU3ai9McUtLS0hsd2ZCMGlEL2hUUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a65f11cb-e66c-4c4a-9520-6b00f8b18e57", "record_id": "flaws_cloudtrail:0000008:a65f11cb-e66c-4c4a-9520-6b00f8b18e57", "row_index": 8, "timestamp": "2019-05-29T11:19:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a65f11cb-e66c-4c4a-9520-6b00f8b18e57", "eventTime": "2019-05-29T11:19:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGVDNabm5SbVQzem9TN3RSU3pUclY1NkNxZjl6Y2NFWDFsNVBUb2ZMaExIb0ZGM0c5UlpLb0o1V3BuSWJuOUF5V3VnMVNvL0pOcU84Z1lYb1cxZ2M5RE5ER2NNMTc4akFpdDRQOFRaMVd3MXFjTnVPSzlacXhtejlOekliRG5taksxY2tEeW1BTUN1K1JUaDkreFZRejEyU25hRjF5VUZvbTdpYS80OTJycGdlSjBsRGRyNFduWXo2TmU3ai9McUtLS0hsd2ZCMGlEL2hUUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d478a220-43d3-40ed-9d6c-63f1cca17e85", "record_id": "flaws_cloudtrail:0000009:d478a220-43d3-40ed-9d6c-63f1cca17e85", "row_index": 9, "timestamp": "2019-05-29T11:19:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d478a220-43d3-40ed-9d6c-63f1cca17e85", "eventTime": "2019-05-29T11:19:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0eVA1YmYyRGU4dmZpLzBZMzRHb2FZZ1ZMQVFFVUU0ODJNVmgxTmx4OUd0QTAwcldBQ0JaaTVjRE9FaFpKZDExRSszRS9IZkNMZjN6Nzhrbk5scDlWSGROdHczNzBoNi9UWTFGLzNFTEpqcTdIcFRsSDY4b2cwVG5KdEMwSG5WOFoxZHpFbGpqeEk0bXZ5bCtSMWRPSFh5NnlHNDQvS3d1UmNBSU9NR0Q4dkN6cHVpcllvNGRleTlhcXZNNjRITU5saExzNDdjUU9xWWpCQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d478a220-43d3-40ed-9d6c-63f1cca17e85", "record_id": "flaws_cloudtrail:0000010:d478a220-43d3-40ed-9d6c-63f1cca17e85", "row_index": 10, "timestamp": "2019-05-29T11:19:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d478a220-43d3-40ed-9d6c-63f1cca17e85", "eventTime": "2019-05-29T11:19:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0eVA1YmYyRGU4dmZpLzBZMzRHb2FZZ1ZMQVFFVUU0ODJNVmgxTmx4OUd0QTAwcldBQ0JaaTVjRE9FaFpKZDExRSszRS9IZkNMZjN6Nzhrbk5scDlWSGROdHczNzBoNi9UWTFGLzNFTEpqcTdIcFRsSDY4b2cwVG5KdEMwSG5WOFoxZHpFbGpqeEk0bXZ5bCtSMWRPSFh5NnlHNDQvS3d1UmNBSU9NR0Q4dkN6cHVpcllvNGRleTlhcXZNNjRITU5saExzNDdjUU9xWWpCQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a947fccb-bc15-428b-89b6-916d95256", "record_id": "flaws_cloudtrail:0000011:a947fccb-bc15-428b-89b6-916d95256", "row_index": 11, "timestamp": "2019-05-29T11:19:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a947fccb-bc15-428b-89b6-916d95256", "eventTime": "2019-05-29T11:19:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvVVV6UEpOd1E2T0x1a0Yya3VUL2pJL1p0emZkZXlnUFQ5RWhNR2dOQzZPYWx5RktndTBHa0diTVRmYjhOOU0xcFpsWS9mVDBxT3F6a3pnRWpsRGY3ekxMKzYvd25pWkhnNUEwNkJzSXVGK0dKN1VpOGZpY3ljK3REQURiTEc4dzNnOW40RFUwWjl5M2VuTkcvdDNqVy9LeHlDcE9TeTFCVXR6OEtzOFFrcHg2Qi9iTFE5T2VlbmNYY3BJcGs2d0h3SWlIMm5NY0FhVWVYZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a947fccb-bc15-428b-89b6-916d95256", "record_id": "flaws_cloudtrail:0000012:a947fccb-bc15-428b-89b6-916d95256", "row_index": 12, "timestamp": "2019-05-29T11:19:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a947fccb-bc15-428b-89b6-916d95256", "eventTime": "2019-05-29T11:19:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvVVV6UEpOd1E2T0x1a0Yya3VUL2pJL1p0emZkZXlnUFQ5RWhNR2dOQzZPYWx5RktndTBHa0diTVRmYjhOOU0xcFpsWS9mVDBxT3F6a3pnRWpsRGY3ekxMKzYvd25pWkhnNUEwNkJzSXVGK0dKN1VpOGZpY3ljK3REQURiTEc4dzNnOW40RFUwWjl5M2VuTkcvdDNqVy9LeHlDcE9TeTFCVXR6OEtzOFFrcHg2Qi9iTFE5T2VlbmNYY3BJcGs2d0h3SWlIMm5NY0FhVWVYZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b59b189-e3c8-467d-ad57-92c1e39f0dfa", "record_id": "flaws_cloudtrail:0000013:4b59b189-e3c8-467d-ad57-92c1e39f0dfa", "row_index": 13, "timestamp": "2019-05-29T11:19:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b59b189-e3c8-467d-ad57-92c1e39f0dfa", "eventTime": "2019-05-29T11:19:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4QkhQRithMTVubml5WjNDOVJnd1NaQjNyajhXWXVhQ2lWN3pmcVFnNmsxVTNzNVpQYUlTVVBOeU1udytDb3NLOC9ucDU1WVVhSjZiVTRES204dWNMOUsxQWFzN0Eyc2VnTnlNMitzV3RYOEM3dVpOWVRIMmpMVStnOVJNUlQwSDA2SExucHFMeTAzUDF6cFRyY0MzdDdiYk1XSGRSOTd2bFBWZXBsUDg3YXRTZDJ5VTRaMXNyWFFKbWpkaVJxQmZpS2E4dGNsMmdEaXlKZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b59b189-e3c8-467d-ad57-92c1e39f0dfa", "record_id": "flaws_cloudtrail:0000014:4b59b189-e3c8-467d-ad57-92c1e39f0dfa", "row_index": 14, "timestamp": "2019-05-29T11:19:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b59b189-e3c8-467d-ad57-92c1e39f0dfa", "eventTime": "2019-05-29T11:19:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4QkhQRithMTVubml5WjNDOVJnd1NaQjNyajhXWXVhQ2lWN3pmcVFnNmsxVTNzNVpQYUlTVVBOeU1udytDb3NLOC9ucDU1WVVhSjZiVTRES204dWNMOUsxQWFzN0Eyc2VnTnlNMitzV3RYOEM3dVpOWVRIMmpMVStnOVJNUlQwSDA2SExucHFMeTAzUDF6cFRyY0MzdDdiYk1XSGRSOTd2bFBWZXBsUDg3YXRTZDJ5VTRaMXNyWFFKbWpkaVJxQmZpS2E4dGNsMmdEaXlKZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5be74cf-a27e-44a3-aeeb-8cf314f4dbef", "record_id": "flaws_cloudtrail:0000015:d5be74cf-a27e-44a3-aeeb-8cf314f4dbef", "row_index": 15, "timestamp": "2019-05-29T11:19:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5be74cf-a27e-44a3-aeeb-8cf314f4dbef", "eventTime": "2019-05-29T11:19:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjY2xvU0REOE51blBJWnRGeXhWc2JYa21HUFRaVTFZOUdrNldzOExMdExVWXk0OHk1RWRqSWVackJTbmJHeU10NHJtY3FYaDgxR3VkaWdLUUswT2NxZGduQVZZUmt2UjBFSUo3aUJuV0c0VzBuYTZaT2dVT3dQUHlzSlI0RVZaeExyR0JYUFRiYmpWa3pJTjhDMDRoOWJpSDZENkI4Qm01MnE2T3BISUNrOGNMQlZrL1A0Z3UyZldJYXRaMnNHYk9jVlJ3aEVMaXVhblllQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5be74cf-a27e-44a3-aeeb-8cf314f4dbef", "record_id": "flaws_cloudtrail:0000016:d5be74cf-a27e-44a3-aeeb-8cf314f4dbef", "row_index": 16, "timestamp": "2019-05-29T11:19:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5be74cf-a27e-44a3-aeeb-8cf314f4dbef", "eventTime": "2019-05-29T11:19:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjY2xvU0REOE51blBJWnRGeXhWc2JYa21HUFRaVTFZOUdrNldzOExMdExVWXk0OHk1RWRqSWVackJTbmJHeU10NHJtY3FYaDgxR3VkaWdLUUswT2NxZGduQVZZUmt2UjBFSUo3aUJuV0c0VzBuYTZaT2dVT3dQUHlzSlI0RVZaeExyR0JYUFRiYmpWa3pJTjhDMDRoOWJpSDZENkI4Qm01MnE2T3BISUNrOGNMQlZrL1A0Z3UyZldJYXRaMnNHYk9jVlJ3aEVMaXVhblllQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7714d22-a1ba-41dc-b7fe-d2635b981bc5", "record_id": "flaws_cloudtrail:0000017:b7714d22-a1ba-41dc-b7fe-d2635b981bc5", "row_index": 17, "timestamp": "2019-05-29T11:20:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7714d22-a1ba-41dc-b7fe-d2635b981bc5", "eventTime": "2019-05-29T11:20:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4NSt6UlZEbkVXWWpVQ1o3K0FSa0h6d0dWRml4ZDA4ZXV5SkE2TlVPZlZIRDQyUjRnWkR4WU5LdHdMZ1FnZTBkR3d3QXRFckVEZkxXOXltWktZRkNvZDdTcDJJOFFCWmkzdDJVRU9kQlp2cjk5VmxUakNXZXlDMFg1VGNrak53MDlnMjJqQ2hKQWFtTmNpR3oyU1RMMEltOW5tUnF3QzVtM1plSkxIMTZYVUNsWUd1OHNwZ1JwTi85YlIxU0xyT3A4WlArL1U0TU52ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7714d22-a1ba-41dc-b7fe-d2635b981bc5", "record_id": "flaws_cloudtrail:0000018:b7714d22-a1ba-41dc-b7fe-d2635b981bc5", "row_index": 18, "timestamp": "2019-05-29T11:20:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7714d22-a1ba-41dc-b7fe-d2635b981bc5", "eventTime": "2019-05-29T11:20:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4NSt6UlZEbkVXWWpVQ1o3K0FSa0h6d0dWRml4ZDA4ZXV5SkE2TlVPZlZIRDQyUjRnWkR4WU5LdHdMZ1FnZTBkR3d3QXRFckVEZkxXOXltWktZRkNvZDdTcDJJOFFCWmkzdDJVRU9kQlp2cjk5VmxUakNXZXlDMFg1VGNrak53MDlnMjJqQ2hKQWFtTmNpR3oyU1RMMEltOW5tUnF3QzVtM1plSkxIMTZYVUNsWUd1OHNwZ1JwTi85YlIxU0xyT3A4WlArL1U0TU52ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79ce976f-fc4a-408c-92f6-9b7ee5452cc0", "record_id": "flaws_cloudtrail:0000019:79ce976f-fc4a-408c-92f6-9b7ee5452cc0", "row_index": 19, "timestamp": "2019-05-29T11:20:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79ce976f-fc4a-408c-92f6-9b7ee5452cc0", "eventTime": "2019-05-29T11:20:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZUVRUdmtLVm5LTlNiYmh2R0QwcmFia2tnU0ttU3NIWE9RY2czRkVvN05meW5EMTN4R3U5OTBFZUFWUVVzT00zc041R093bWVWeUpOcXNMRnEwWmZodGlMbk8xTm1yY043YXA0dHJPRmFGZ0xRaTJwU0xQM2pNTU1xMXEwaExzVFpUZVZ0ZTUraVpHdFd5UmQxV2RCUktXQ29aZFZ0Skxzd0NYcW1YSnQ4YXhmUmtlVXdJZHpmRmFtS0laOURvc29mMnFaKzkvV2twND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79ce976f-fc4a-408c-92f6-9b7ee5452cc0", "record_id": "flaws_cloudtrail:0000020:79ce976f-fc4a-408c-92f6-9b7ee5452cc0", "row_index": 20, "timestamp": "2019-05-29T11:20:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79ce976f-fc4a-408c-92f6-9b7ee5452cc0", "eventTime": "2019-05-29T11:20:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZUVRUdmtLVm5LTlNiYmh2R0QwcmFia2tnU0ttU3NIWE9RY2czRkVvN05meW5EMTN4R3U5OTBFZUFWUVVzT00zc041R093bWVWeUpOcXNMRnEwWmZodGlMbk8xTm1yY043YXA0dHJPRmFGZ0xRaTJwU0xQM2pNTU1xMXEwaExzVFpUZVZ0ZTUraVpHdFd5UmQxV2RCUktXQ29aZFZ0Skxzd0NYcW1YSnQ4YXhmUmtlVXdJZHpmRmFtS0laOURvc29mMnFaKzkvV2twND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4335fca9-1475-4b05-9562-9c7ac1adaa8e", "record_id": "flaws_cloudtrail:0000021:4335fca9-1475-4b05-9562-9c7ac1adaa8e", "row_index": 21, "timestamp": "2019-05-29T11:20:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4335fca9-1475-4b05-9562-9c7ac1adaa8e", "eventTime": "2019-05-29T11:20:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUb243cXhFNThSa01nZTgwRlRXeEFzQUdCT3J3WWFsTGFjSk5TS0J3WkxXaHB0Y1prdXMzYjZLbGxJbndvL3BNa0N6K1FJL0lrSS8wekYwUVpub3pLMHRObHdFNHRZQm80bExPc1dGQW9lM21ZUHdwV3VLRWdvSTg4YTNxYnRYV3lDNHdLWWxkSVpoZmtLNEpGQVZuMzZjNGt0MG9kZHNnV3F1TE9laC9wUXRaUkpHV2h5Skd2MXRzaU5aWERiVWhNSEovN1JEcnpnaGpmVFpicnlPZERWQkYzeWRFU1UwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4335fca9-1475-4b05-9562-9c7ac1adaa8e", "record_id": "flaws_cloudtrail:0000022:4335fca9-1475-4b05-9562-9c7ac1adaa8e", "row_index": 22, "timestamp": "2019-05-29T11:20:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4335fca9-1475-4b05-9562-9c7ac1adaa8e", "eventTime": "2019-05-29T11:20:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUb243cXhFNThSa01nZTgwRlRXeEFzQUdCT3J3WWFsTGFjSk5TS0J3WkxXaHB0Y1prdXMzYjZLbGxJbndvL3BNa0N6K1FJL0lrSS8wekYwUVpub3pLMHRObHdFNHRZQm80bExPc1dGQW9lM21ZUHdwV3VLRWdvSTg4YTNxYnRYV3lDNHdLWWxkSVpoZmtLNEpGQVZuMzZjNGt0MG9kZHNnV3F1TE9laC9wUXRaUkpHV2h5Skd2MXRzaU5aWERiVWhNSEovN1JEcnpnaGpmVFpicnlPZERWQkYzeWRFU1UwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8de3dee3-6bd4-4992-b129-7ec6f77ba4a7", "record_id": "flaws_cloudtrail:0000023:8de3dee3-6bd4-4992-b129-7ec6f77ba4a7", "row_index": 23, "timestamp": "2019-05-29T11:20:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8de3dee3-6bd4-4992-b129-7ec6f77ba4a7", "eventTime": "2019-05-29T11:20:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRY3RFOUc0VTJCVmdGbEczdzlya1NaVGdWVjM0UHFjalQ3T1Mza3ROTmtEaGVJUmgrNDJCWk9DZklrK1pPaGNyb2s4QnlUeHBNQmNWaEsvVEFNd1RsM1h3dFV4VnBQQXl1eHRuaVhpcFlrRGFlYmJWakxvS0xYWWZzUUtGV25ZemVGSDIyS0pESU5IV3JvbXh0WU1mUHNHY1hsQ21BTmEwM1F0bW9ydVVVMXF3Uk5vYVMvKzFIMmlWa1dPTVlCVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "294f47a2-5b0d-48bf-87f3-8fb6a986ab08", "record_id": "flaws_cloudtrail:0000024:294f47a2-5b0d-48bf-87f3-8fb6a986ab08", "row_index": 24, "timestamp": "2019-05-29T11:20:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "294f47a2-5b0d-48bf-87f3-8fb6a986ab08", "eventTime": "2019-05-29T11:20:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuc2o0WE9UaGxYanFhK2s0dWNWc2V3aFNYbUJPZXJFZUtsTStpQjUzUFZ5aTIyK3pBK3Znd1BubmNFMWFGSFJuUE1Kb2FKVzNrOXRUNE82eklSVUcwUHkxbzM2bkFjbUxSQ08xMmlRMVJkWlZISURHTXFPak52WTBUaG4wejJyOUFmc3ZVRVJwZjBhcERpejlaZDZhejZhempEVExYZEx3NUJZdEp2OXR6UkhFbm8wUTJpVDBzQkFWaXRIUDhrb1hiTHlxU0RPRnVVaGg0TzhwaGMxREdZNDJxMk1uTVVvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8de3dee3-6bd4-4992-b129-7ec6f77ba4a7", "record_id": "flaws_cloudtrail:0000025:8de3dee3-6bd4-4992-b129-7ec6f77ba4a7", "row_index": 25, "timestamp": "2019-05-29T11:20:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8de3dee3-6bd4-4992-b129-7ec6f77ba4a7", "eventTime": "2019-05-29T11:20:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRY3RFOUc0VTJCVmdGbEczdzlya1NaVGdWVjM0UHFjalQ3T1Mza3ROTmtEaGVJUmgrNDJCWk9DZklrK1pPaGNyb2s4QnlUeHBNQmNWaEsvVEFNd1RsM1h3dFV4VnBQQXl1eHRuaVhpcFlrRGFlYmJWakxvS0xYWWZzUUtGV25ZemVGSDIyS0pESU5IV3JvbXh0WU1mUHNHY1hsQ21BTmEwM1F0bW9ydVVVMXF3Uk5vYVMvKzFIMmlWa1dPTVlCVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "294f47a2-5b0d-48bf-87f3-8fb6a986ab08", "record_id": "flaws_cloudtrail:0000026:294f47a2-5b0d-48bf-87f3-8fb6a986ab08", "row_index": 26, "timestamp": "2019-05-29T11:20:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "294f47a2-5b0d-48bf-87f3-8fb6a986ab08", "eventTime": "2019-05-29T11:20:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuc2o0WE9UaGxYanFhK2s0dWNWc2V3aFNYbUJPZXJFZUtsTStpQjUzUFZ5aTIyK3pBK3Znd1BubmNFMWFGSFJuUE1Kb2FKVzNrOXRUNE82eklSVUcwUHkxbzM2bkFjbUxSQ08xMmlRMVJkWlZISURHTXFPak52WTBUaG4wejJyOUFmc3ZVRVJwZjBhcERpejlaZDZhejZhempEVExYZEx3NUJZdEp2OXR6UkhFbm8wUTJpVDBzQkFWaXRIUDhrb1hiTHlxU0RPRnVVaGg0TzhwaGMxREdZNDJxMk1uTVVvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "619733-55bb-4b7f-9145-711d4b54a4a6", "record_id": "flaws_cloudtrail:0000027:619733-55bb-4b7f-9145-711d4b54a4a6", "row_index": 27, "timestamp": "2019-05-29T11:20:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "619733-55bb-4b7f-9145-711d4b54a4a6", "eventTime": "2019-05-29T11:20:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrR1duc1RxdXkvd2gyMWVBOHZEZW96WGRzTUNpTWFwOEg4cGgrWFlNYUNKZ1N0b3pRTUk4dlNPWmR4dDdWTVZ2SVpvcE5BMlFaVXFtenZyOUYwaUxQUEx4M1cyM24zZXB5U2Fya3lMUkR6dE9sU0tRb2hMaXpNR3JKZmRoMEZDUldPOEl0aS9JZkJKc0dMSmtQeDM2YVl1bVpPdkk4aTQ2OHVucWVmZ0gvNWl5WkdMbGsvSWFMQkVFTFY1dFVRMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "619733-55bb-4b7f-9145-711d4b54a4a6", "record_id": "flaws_cloudtrail:0000028:619733-55bb-4b7f-9145-711d4b54a4a6", "row_index": 28, "timestamp": "2019-05-29T11:20:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "619733-55bb-4b7f-9145-711d4b54a4a6", "eventTime": "2019-05-29T11:20:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrR1duc1RxdXkvd2gyMWVBOHZEZW96WGRzTUNpTWFwOEg4cGgrWFlNYUNKZ1N0b3pRTUk4dlNPWmR4dDdWTVZ2SVpvcE5BMlFaVXFtenZyOUYwaUxQUEx4M1cyM24zZXB5U2Fya3lMUkR6dE9sU0tRb2hMaXpNR3JKZmRoMEZDUldPOEl0aS9JZkJKc0dMSmtQeDM2YVl1bVpPdkk4aTQ2OHVucWVmZ0gvNWl5WkdMbGsvSWFMQkVFTFY1dFVRMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d95147b-f85a-4a9e-a1cb-55ca8c9b7982", "record_id": "flaws_cloudtrail:0000029:8d95147b-f85a-4a9e-a1cb-55ca8c9b7982", "row_index": 29, "timestamp": "2019-05-29T11:20:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d95147b-f85a-4a9e-a1cb-55ca8c9b7982", "eventTime": "2019-05-29T11:20:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3V1BSRGpkd1dIaGpPMm9oOHBRNWo3MFdHTTJvRWwwQWFlTVMrZEJPNmlNdDFlZTB2NVVaN2lIWCtRZlltTXNNYTdtSWZSQit2S0NPaU1zR0twNjdEOStFS1ErV0pFMFFXajZnZVJQL0o0Y3NOZlB5UEdYZG9DcFhGN3pQVGVTaXNHN2d6NkxqWEhzY0V4dGVFNUdyM0pPclF5Rzh1SS9UWlFoNGF5TnNacGUyMmtCUmNBNGF5ZjdwRlVsd1ZOdTdCOUJnSjEvNG5xc0RrWENxSmFYbW5hU2ovUFBBTmpZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc2c005c-f101-4ca8-97d7-f6708b6c93e1", "record_id": "flaws_cloudtrail:0000030:cc2c005c-f101-4ca8-97d7-f6708b6c93e1", "row_index": 30, "timestamp": "2019-05-29T11:20:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc2c005c-f101-4ca8-97d7-f6708b6c93e1", "eventTime": "2019-05-29T11:20:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBb0xldUkrWGsyY3ZXSEYvVFFiaTMwbjNDcUxPREhBOEJ6TFczZTlSV0c4TE5hNmwxVDJtSERZbGZxMXpNWTJQYXY4cHVKVnhveXNDZTVpUnZrbUszcjdMd1dHV3ducGh0dFlYb2d6TTlYVWNNSlYzNmp3WUFWSFQ3MFBEdjhHSTZ5Yk53TGpPVVhKZ0hUNWpCTEordXRWajJEMU5KVWp3d1hoUU00SGZIVGRmSmo2UndOblFISGd2S3k3Q2R1Zz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d95147b-f85a-4a9e-a1cb-55ca8c9b7982", "record_id": "flaws_cloudtrail:0000031:8d95147b-f85a-4a9e-a1cb-55ca8c9b7982", "row_index": 31, "timestamp": "2019-05-29T11:20:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d95147b-f85a-4a9e-a1cb-55ca8c9b7982", "eventTime": "2019-05-29T11:20:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3V1BSRGpkd1dIaGpPMm9oOHBRNWo3MFdHTTJvRWwwQWFlTVMrZEJPNmlNdDFlZTB2NVVaN2lIWCtRZlltTXNNYTdtSWZSQit2S0NPaU1zR0twNjdEOStFS1ErV0pFMFFXajZnZVJQL0o0Y3NOZlB5UEdYZG9DcFhGN3pQVGVTaXNHN2d6NkxqWEhzY0V4dGVFNUdyM0pPclF5Rzh1SS9UWlFoNGF5TnNacGUyMmtCUmNBNGF5ZjdwRlVsd1ZOdTdCOUJnSjEvNG5xc0RrWENxSmFYbW5hU2ovUFBBTmpZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc2c005c-f101-4ca8-97d7-f6708b6c93e1", "record_id": "flaws_cloudtrail:0000032:cc2c005c-f101-4ca8-97d7-f6708b6c93e1", "row_index": 32, "timestamp": "2019-05-29T11:20:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc2c005c-f101-4ca8-97d7-f6708b6c93e1", "eventTime": "2019-05-29T11:20:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBb0xldUkrWGsyY3ZXSEYvVFFiaTMwbjNDcUxPREhBOEJ6TFczZTlSV0c4TE5hNmwxVDJtSERZbGZxMXpNWTJQYXY4cHVKVnhveXNDZTVpUnZrbUszcjdMd1dHV3ducGh0dFlYb2d6TTlYVWNNSlYzNmp3WUFWSFQ3MFBEdjhHSTZ5Yk53TGpPVVhKZ0hUNWpCTEordXRWajJEMU5KVWp3d1hoUU00SGZIVGRmSmo2UndOblFISGd2S3k3Q2R1Zz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acf654ee-1b7b-434b-ab15-55b670241ab4", "record_id": "flaws_cloudtrail:0000033:acf654ee-1b7b-434b-ab15-55b670241ab4", "row_index": 33, "timestamp": "2019-05-29T11:20:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acf654ee-1b7b-434b-ab15-55b670241ab4", "eventTime": "2019-05-29T11:20:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5NHdrcUQwZXpMZUZES3dGTkpyUGV6OGxWQ0UzZkYzWTdITVEvYUpTRDA4Vno1YUpCbUVGdjQraGRIL2lSVmIzSnp6czhXZlc1MEI0TzArTUZBUGxza01RWEFNdFg2NUtHcXNmcCt6M2hlVnlNOHBLZTg4RWtST0Q4VWVkWWxBRVh0b21ScDBzR3M1WHBQSklsWjV6akZxUmJiQzVWZTA4a3g2a2pDTno2RHF0azhYbVVlM2MzSjA1aU9rdHJqcy8vWndRb1hjOHJzZFRXbXh5TXpOUVVaZDkzWi9YUjFjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acf654ee-1b7b-434b-ab15-55b670241ab4", "record_id": "flaws_cloudtrail:0000034:acf654ee-1b7b-434b-ab15-55b670241ab4", "row_index": 34, "timestamp": "2019-05-29T11:20:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acf654ee-1b7b-434b-ab15-55b670241ab4", "eventTime": "2019-05-29T11:20:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5NHdrcUQwZXpMZUZES3dGTkpyUGV6OGxWQ0UzZkYzWTdITVEvYUpTRDA4Vno1YUpCbUVGdjQraGRIL2lSVmIzSnp6czhXZlc1MEI0TzArTUZBUGxza01RWEFNdFg2NUtHcXNmcCt6M2hlVnlNOHBLZTg4RWtST0Q4VWVkWWxBRVh0b21ScDBzR3M1WHBQSklsWjV6akZxUmJiQzVWZTA4a3g2a2pDTno2RHF0azhYbVVlM2MzSjA1aU9rdHJqcy8vWndRb1hjOHJzZFRXbXh5TXpOUVVaZDkzWi9YUjFjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e7a8b29-b286-4460-b7d1-2fcf9edd797d", "record_id": "flaws_cloudtrail:0000035:4e7a8b29-b286-4460-b7d1-2fcf9edd797d", "row_index": 35, "timestamp": "2019-05-29T11:20:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e7a8b29-b286-4460-b7d1-2fcf9edd797d", "eventTime": "2019-05-29T11:20:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxVHl1UkJHbFB2aVZoR0laL3F0N2ltcWdQSi9QOUxXbHI2Yk9ZcWJWcDBUQThBT1pyV3hQUFNGV00vY0k4K240azI2dmJucExycnJXVm1SUC9xZ3gyYTU1NlNnY2lTZktMVS9RbERtWDFzbVhFMXh2OElwZ1RPU3dIV3RPcUVzUzJ0SUJubHpTWHJ6ZmpvL2Y4bmRQNld0WW9tNjZxS2ZjNUJmVytxc1A0Z2F3b0dqZDFSb1ZyOFVKOWw5bGdXYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e7a8b29-b286-4460-b7d1-2fcf9edd797d", "record_id": "flaws_cloudtrail:0000036:4e7a8b29-b286-4460-b7d1-2fcf9edd797d", "row_index": 36, "timestamp": "2019-05-29T11:20:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e7a8b29-b286-4460-b7d1-2fcf9edd797d", "eventTime": "2019-05-29T11:20:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxVHl1UkJHbFB2aVZoR0laL3F0N2ltcWdQSi9QOUxXbHI2Yk9ZcWJWcDBUQThBT1pyV3hQUFNGV00vY0k4K240azI2dmJucExycnJXVm1SUC9xZ3gyYTU1NlNnY2lTZktMVS9RbERtWDFzbVhFMXh2OElwZ1RPU3dIV3RPcUVzUzJ0SUJubHpTWHJ6ZmpvL2Y4bmRQNld0WW9tNjZxS2ZjNUJmVytxc1A0Z2F3b0dqZDFSb1ZyOFVKOWw5bGdXYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0412bf09-bb53-4493-8471-1031d14de3db", "record_id": "flaws_cloudtrail:0000037:0412bf09-bb53-4493-8471-1031d14de3db", "row_index": 37, "timestamp": "2019-05-29T11:20:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0412bf09-bb53-4493-8471-1031d14de3db", "eventTime": "2019-05-29T11:20:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCMnVoSXpXV25tMnlvM1k4REtYVklFZS9nZmxXZ2EzRVk3NjhCZGRHNmkvditHNFJta21rRzhJRkJ3dFJTelVqRkxhNHQyaWpqT25XK1gvNklmU1lXZnFFY1kraEw4bEYwbTZGN1h3NnhZTHRxdUtTVlBqWjJMbGkwSjM3QWpIVFdzTXFuaTBTWG9GMmZlNHM2YkVPNVRGWVlKT0RaZTNwM0xnR21BVUZQZjA4YUpkaGlta085aDVIOXdGV0tsaG1nWW8xM3lqajVacWZiemo3K3VsRnM2aCtmUXZtMDMwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0412bf09-bb53-4493-8471-1031d14de3db", "record_id": "flaws_cloudtrail:0000038:0412bf09-bb53-4493-8471-1031d14de3db", "row_index": 38, "timestamp": "2019-05-29T11:20:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0412bf09-bb53-4493-8471-1031d14de3db", "eventTime": "2019-05-29T11:20:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCMnVoSXpXV25tMnlvM1k4REtYVklFZS9nZmxXZ2EzRVk3NjhCZGRHNmkvditHNFJta21rRzhJRkJ3dFJTelVqRkxhNHQyaWpqT25XK1gvNklmU1lXZnFFY1kraEw4bEYwbTZGN1h3NnhZTHRxdUtTVlBqWjJMbGkwSjM3QWpIVFdzTXFuaTBTWG9GMmZlNHM2YkVPNVRGWVlKT0RaZTNwM0xnR21BVUZQZjA4YUpkaGlta085aDVIOXdGV0tsaG1nWW8xM3lqajVacWZiemo3K3VsRnM2aCtmUXZtMDMwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41a41e4a-99c9-412a-871d-6c0cdb083541", "record_id": "flaws_cloudtrail:0000039:41a41e4a-99c9-412a-871d-6c0cdb083541", "row_index": 39, "timestamp": "2019-05-29T11:20:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41a41e4a-99c9-412a-871d-6c0cdb083541", "eventTime": "2019-05-29T11:20:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuMGh5MktNS3hlR1pxa2FUU2RrTnB5WUtQZW5ISW1oTjFmejNhZWxGZW9pbklSWFdyQWxaYXZNNUZSMDVudUVoNkdPd1A4c1Jwai93QzVlSVJVUXhHREdoeVdHR1I1WGNoSGdNMnZjQW5mbzB3blZzQktSSHZSNjB2UktsS3owaFd2eUJuTUo1eXRTL2J5ZFQwSnlsVjBoUEVMdVR3Qmxpc05LdzRDcHovSVd2cm9haUY1S291RldPWUhKSk83az0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41a41e4a-99c9-412a-871d-6c0cdb083541", "record_id": "flaws_cloudtrail:0000040:41a41e4a-99c9-412a-871d-6c0cdb083541", "row_index": 40, "timestamp": "2019-05-29T11:20:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41a41e4a-99c9-412a-871d-6c0cdb083541", "eventTime": "2019-05-29T11:20:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuMGh5MktNS3hlR1pxa2FUU2RrTnB5WUtQZW5ISW1oTjFmejNhZWxGZW9pbklSWFdyQWxaYXZNNUZSMDVudUVoNkdPd1A4c1Jwai93QzVlSVJVUXhHREdoeVdHR1I1WGNoSGdNMnZjQW5mbzB3blZzQktSSHZSNjB2UktsS3owaFd2eUJuTUo1eXRTL2J5ZFQwSnlsVjBoUEVMdVR3Qmxpc05LdzRDcHovSVd2cm9haUY1S291RldPWUhKSk83az0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a23ea52b-2e25-4a27-afed-4822df65c845", "record_id": "flaws_cloudtrail:0000041:a23ea52b-2e25-4a27-afed-4822df65c845", "row_index": 41, "timestamp": "2019-05-29T11:23:30Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a23ea52b-2e25-4a27-afed-4822df65c845", "eventTime": "2019-05-29T11:23:30Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a23ea52b-2e25-4a27-afed-4822df65c845", "record_id": "flaws_cloudtrail:0000042:a23ea52b-2e25-4a27-afed-4822df65c845", "row_index": 42, "timestamp": "2019-05-29T11:23:30Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a23ea52b-2e25-4a27-afed-4822df65c845", "eventTime": "2019-05-29T11:23:30Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b743df70-882b-4a44-86f1-15a5ca9f43a1", "record_id": "flaws_cloudtrail:0000043:b743df70-882b-4a44-86f1-15a5ca9f43a1", "row_index": 43, "timestamp": "2019-05-29T11:24:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b743df70-882b-4a44-86f1-15a5ca9f43a1", "eventTime": "2019-05-29T11:24:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZS4T73VG0QNHAUQ6", "expiration": "May 29, 2019 5:52:31 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b743df70-882b-4a44-86f1-15a5ca9f43a1", "record_id": "flaws_cloudtrail:0000044:b743df70-882b-4a44-86f1-15a5ca9f43a1", "row_index": 44, "timestamp": "2019-05-29T11:24:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b743df70-882b-4a44-86f1-15a5ca9f43a1", "eventTime": "2019-05-29T11:24:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZS4T73VG0QNHAUQ6", "expiration": "May 29, 2019 5:52:31 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b503e97-0486-4321-ae8b-e8499f4b6b5c", "record_id": "flaws_cloudtrail:0000045:0b503e97-0486-4321-ae8b-e8499f4b6b5c", "row_index": 45, "timestamp": "2019-05-29T11:30:56Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b503e97-0486-4321-ae8b-e8499f4b6b5c", "eventTime": "2019-05-29T11:30:56Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77f411a8-cbeb-48f5-a875-468832aea614", "record_id": "flaws_cloudtrail:0000046:77f411a8-cbeb-48f5-a875-468832aea614", "row_index": 46, "timestamp": "2019-05-29T11:30:56Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77f411a8-cbeb-48f5-a875-468832aea614", "eventTime": "2019-05-29T11:30:56Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2d3409d-e5c7-4186-bac3-890098ae838c", "record_id": "flaws_cloudtrail:0000047:e2d3409d-e5c7-4186-bac3-890098ae838c", "row_index": 47, "timestamp": "2019-05-29T11:30:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2d3409d-e5c7-4186-bac3-890098ae838c", "eventTime": "2019-05-29T11:30:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80177-b875-4855-bc45-728e30cf90dc", "record_id": "flaws_cloudtrail:0000048:80177-b875-4855-bc45-728e30cf90dc", "row_index": 48, "timestamp": "2019-05-29T11:30:56Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80177-b875-4855-bc45-728e30cf90dc", "eventTime": "2019-05-29T11:30:56Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b503e97-0486-4321-ae8b-e8499f4b6b5c", "record_id": "flaws_cloudtrail:0000049:0b503e97-0486-4321-ae8b-e8499f4b6b5c", "row_index": 49, "timestamp": "2019-05-29T11:30:56Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b503e97-0486-4321-ae8b-e8499f4b6b5c", "eventTime": "2019-05-29T11:30:56Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77f411a8-cbeb-48f5-a875-468832aea614", "record_id": "flaws_cloudtrail:0000050:77f411a8-cbeb-48f5-a875-468832aea614", "row_index": 50, "timestamp": "2019-05-29T11:30:56Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77f411a8-cbeb-48f5-a875-468832aea614", "eventTime": "2019-05-29T11:30:56Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2d3409d-e5c7-4186-bac3-890098ae838c", "record_id": "flaws_cloudtrail:0000051:e2d3409d-e5c7-4186-bac3-890098ae838c", "row_index": 51, "timestamp": "2019-05-29T11:30:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2d3409d-e5c7-4186-bac3-890098ae838c", "eventTime": "2019-05-29T11:30:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80177-b875-4855-bc45-728e30cf90dc", "record_id": "flaws_cloudtrail:0000052:80177-b875-4855-bc45-728e30cf90dc", "row_index": 52, "timestamp": "2019-05-29T11:30:56Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80177-b875-4855-bc45-728e30cf90dc", "eventTime": "2019-05-29T11:30:56Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c54bae9b-b84a-4099-8c63-531664dc6538b", "record_id": "flaws_cloudtrail:0000053:c54bae9b-b84a-4099-8c63-531664dc6538b", "row_index": 53, "timestamp": "2019-05-29T11:30:57Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c54bae9b-b84a-4099-8c63-531664dc6538b", "eventTime": "2019-05-29T11:30:57Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d188da09-4b05-4bbc-8d15-f3f8a9e63094", "record_id": "flaws_cloudtrail:0000054:d188da09-4b05-4bbc-8d15-f3f8a9e63094", "row_index": 54, "timestamp": "2019-05-29T11:30:57Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d188da09-4b05-4bbc-8d15-f3f8a9e63094", "eventTime": "2019-05-29T11:30:57Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d85d8d4b-4c6a-4500-84ed-1e4dd6cc6d10", "record_id": "flaws_cloudtrail:0000055:d85d8d4b-4c6a-4500-84ed-1e4dd6cc6d10", "row_index": 55, "timestamp": "2019-05-29T11:30:57Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d85d8d4b-4c6a-4500-84ed-1e4dd6cc6d10", "eventTime": "2019-05-29T11:30:57Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c54bae9b-b84a-4099-8c63-531664dc6538b", "record_id": "flaws_cloudtrail:0000056:c54bae9b-b84a-4099-8c63-531664dc6538b", "row_index": 56, "timestamp": "2019-05-29T11:30:57Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c54bae9b-b84a-4099-8c63-531664dc6538b", "eventTime": "2019-05-29T11:30:57Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d188da09-4b05-4bbc-8d15-f3f8a9e63094", "record_id": "flaws_cloudtrail:0000057:d188da09-4b05-4bbc-8d15-f3f8a9e63094", "row_index": 57, "timestamp": "2019-05-29T11:30:57Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d188da09-4b05-4bbc-8d15-f3f8a9e63094", "eventTime": "2019-05-29T11:30:57Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d85d8d4b-4c6a-4500-84ed-1e4dd6cc6d10", "record_id": "flaws_cloudtrail:0000058:d85d8d4b-4c6a-4500-84ed-1e4dd6cc6d10", "row_index": 58, "timestamp": "2019-05-29T11:30:57Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d85d8d4b-4c6a-4500-84ed-1e4dd6cc6d10", "eventTime": "2019-05-29T11:30:57Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "655840f-71a3-4825-a690-6c2b931869c", "record_id": "flaws_cloudtrail:0000059:655840f-71a3-4825-a690-6c2b931869c", "row_index": 59, "timestamp": "2019-05-29T11:30:58Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "655840f-71a3-4825-a690-6c2b931869c", "eventTime": "2019-05-29T11:30:58Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b72a86e-55de-41f3-a7d6-5fea7f201aa9", "record_id": "flaws_cloudtrail:0000060:6b72a86e-55de-41f3-a7d6-5fea7f201aa9", "row_index": 60, "timestamp": "2019-05-29T11:30:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b72a86e-55de-41f3-a7d6-5fea7f201aa9", "eventTime": "2019-05-29T11:30:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4c0bc9c-241f-4890-8247-2d4d18a16df9", "record_id": "flaws_cloudtrail:0000061:b4c0bc9c-241f-4890-8247-2d4d18a16df9", "row_index": 61, "timestamp": "2019-05-29T11:30:58Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4c0bc9c-241f-4890-8247-2d4d18a16df9", "eventTime": "2019-05-29T11:30:58Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9b0d9e9-a72e-4c7a-b76c-51f1404f4640", "record_id": "flaws_cloudtrail:0000062:d9b0d9e9-a72e-4c7a-b76c-51f1404f4640", "row_index": 62, "timestamp": "2019-05-29T11:30:58Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9b0d9e9-a72e-4c7a-b76c-51f1404f4640", "eventTime": "2019-05-29T11:30:58Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "655840f-71a3-4825-a690-6c2b931869c", "record_id": "flaws_cloudtrail:0000063:655840f-71a3-4825-a690-6c2b931869c", "row_index": 63, "timestamp": "2019-05-29T11:30:58Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "655840f-71a3-4825-a690-6c2b931869c", "eventTime": "2019-05-29T11:30:58Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b72a86e-55de-41f3-a7d6-5fea7f201aa9", "record_id": "flaws_cloudtrail:0000064:6b72a86e-55de-41f3-a7d6-5fea7f201aa9", "row_index": 64, "timestamp": "2019-05-29T11:30:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b72a86e-55de-41f3-a7d6-5fea7f201aa9", "eventTime": "2019-05-29T11:30:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4c0bc9c-241f-4890-8247-2d4d18a16df9", "record_id": "flaws_cloudtrail:0000065:b4c0bc9c-241f-4890-8247-2d4d18a16df9", "row_index": 65, "timestamp": "2019-05-29T11:30:58Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4c0bc9c-241f-4890-8247-2d4d18a16df9", "eventTime": "2019-05-29T11:30:58Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9b0d9e9-a72e-4c7a-b76c-51f1404f4640", "record_id": "flaws_cloudtrail:0000066:d9b0d9e9-a72e-4c7a-b76c-51f1404f4640", "row_index": 66, "timestamp": "2019-05-29T11:30:58Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9b0d9e9-a72e-4c7a-b76c-51f1404f4640", "eventTime": "2019-05-29T11:30:58Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae7708c4-dbba-4cab-ba4b-5fed1df62edf", "record_id": "flaws_cloudtrail:0000067:ae7708c4-dbba-4cab-ba4b-5fed1df62edf", "row_index": 67, "timestamp": "2019-05-29T11:30:59Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae7708c4-dbba-4cab-ba4b-5fed1df62edf", "eventTime": "2019-05-29T11:30:59Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e6a2495-1a7b-4a21-988b-02559ac512a0", "record_id": "flaws_cloudtrail:0000068:9e6a2495-1a7b-4a21-988b-02559ac512a0", "row_index": 68, "timestamp": "2019-05-29T11:30:59Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e6a2495-1a7b-4a21-988b-02559ac512a0", "eventTime": "2019-05-29T11:30:59Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae7708c4-dbba-4cab-ba4b-5fed1df62edf", "record_id": "flaws_cloudtrail:0000069:ae7708c4-dbba-4cab-ba4b-5fed1df62edf", "row_index": 69, "timestamp": "2019-05-29T11:30:59Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae7708c4-dbba-4cab-ba4b-5fed1df62edf", "eventTime": "2019-05-29T11:30:59Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e6a2495-1a7b-4a21-988b-02559ac512a0", "record_id": "flaws_cloudtrail:0000070:9e6a2495-1a7b-4a21-988b-02559ac512a0", "row_index": 70, "timestamp": "2019-05-29T11:30:59Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e6a2495-1a7b-4a21-988b-02559ac512a0", "eventTime": "2019-05-29T11:30:59Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60f36c5d-aac5-4fd7-9b03-1a0043c6ff68", "record_id": "flaws_cloudtrail:0000071:60f36c5d-aac5-4fd7-9b03-1a0043c6ff68", "row_index": 71, "timestamp": "2019-05-29T11:31:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60f36c5d-aac5-4fd7-9b03-1a0043c6ff68", "eventTime": "2019-05-29T11:31:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "447e2744-f6d6-4d8b-ac01-b9d684f56f3e", "record_id": "flaws_cloudtrail:0000072:447e2744-f6d6-4d8b-ac01-b9d684f56f3e", "row_index": 72, "timestamp": "2019-05-29T11:31:22Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "447e2744-f6d6-4d8b-ac01-b9d684f56f3e", "eventTime": "2019-05-29T11:31:22Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 500, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60f36c5d-aac5-4fd7-9b03-1a0043c6ff68", "record_id": "flaws_cloudtrail:0000073:60f36c5d-aac5-4fd7-9b03-1a0043c6ff68", "row_index": 73, "timestamp": "2019-05-29T11:31:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60f36c5d-aac5-4fd7-9b03-1a0043c6ff68", "eventTime": "2019-05-29T11:31:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "447e2744-f6d6-4d8b-ac01-b9d684f56f3e", "record_id": "flaws_cloudtrail:0000074:447e2744-f6d6-4d8b-ac01-b9d684f56f3e", "row_index": 74, "timestamp": "2019-05-29T11:31:22Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "447e2744-f6d6-4d8b-ac01-b9d684f56f3e", "eventTime": "2019-05-29T11:31:22Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 500, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc8e2115-22bd-4dec-b611-dc7e8815bd10", "record_id": "flaws_cloudtrail:0000075:cc8e2115-22bd-4dec-b611-dc7e8815bd10", "row_index": 75, "timestamp": "2019-05-29T11:39:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc8e2115-22bd-4dec-b611-dc7e8815bd10", "eventTime": "2019-05-29T11:39:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc8e2115-22bd-4dec-b611-dc7e8815bd10", "record_id": "flaws_cloudtrail:0000076:cc8e2115-22bd-4dec-b611-dc7e8815bd10", "row_index": 76, "timestamp": "2019-05-29T11:39:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc8e2115-22bd-4dec-b611-dc7e8815bd10", "eventTime": "2019-05-29T11:39:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f35efb2a-53b3-4792-8797-5f6f73d7fe6d", "record_id": "flaws_cloudtrail:0000077:f35efb2a-53b3-4792-8797-5f6f73d7fe6d", "row_index": 77, "timestamp": "2019-05-29T11:39:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f35efb2a-53b3-4792-8797-5f6f73d7fe6d", "eventTime": "2019-05-29T11:39:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f35efb2a-53b3-4792-8797-5f6f73d7fe6d", "record_id": "flaws_cloudtrail:0000078:f35efb2a-53b3-4792-8797-5f6f73d7fe6d", "row_index": 78, "timestamp": "2019-05-29T11:39:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f35efb2a-53b3-4792-8797-5f6f73d7fe6d", "eventTime": "2019-05-29T11:39:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91487ea0-ba7f-465a-9bed-6ed1b28574a2", "record_id": "flaws_cloudtrail:0000079:91487ea0-ba7f-465a-9bed-6ed1b28574a2", "row_index": 79, "timestamp": "2019-05-29T11:39:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91487ea0-ba7f-465a-9bed-6ed1b28574a2", "eventTime": "2019-05-29T11:39:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNam00QnY4V2czUHptSktINUdrdlcvMm5vdU9STndIM1M0VFo0SWpDSVYwWWo4SDlENW5rdlE0N1Z4bjFPNnNGQjhMQ2lVM09ybGQvMTUxMlk5RFBoeE9TMHFOelFVYXk2TXNDaHBUTWVsMWtyNXFaa3JISUZ0SStlRCtIdlFzQWhGaHBBc1BKdDJ3bkpnRjR4cW1VclBwS0dPVm1PekQ4NTNhMmtXUDJGWVMxN2hjWGNxbG4xRHZRMkFHZXo4NHhGemNLMjhOMURxTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91487ea0-ba7f-465a-9bed-6ed1b28574a2", "record_id": "flaws_cloudtrail:0000080:91487ea0-ba7f-465a-9bed-6ed1b28574a2", "row_index": 80, "timestamp": "2019-05-29T11:39:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91487ea0-ba7f-465a-9bed-6ed1b28574a2", "eventTime": "2019-05-29T11:39:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNam00QnY4V2czUHptSktINUdrdlcvMm5vdU9STndIM1M0VFo0SWpDSVYwWWo4SDlENW5rdlE0N1Z4bjFPNnNGQjhMQ2lVM09ybGQvMTUxMlk5RFBoeE9TMHFOelFVYXk2TXNDaHBUTWVsMWtyNXFaa3JISUZ0SStlRCtIdlFzQWhGaHBBc1BKdDJ3bkpnRjR4cW1VclBwS0dPVm1PekQ4NTNhMmtXUDJGWVMxN2hjWGNxbG4xRHZRMkFHZXo4NHhGemNLMjhOMURxTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66b2880c-ad93-4d8c-a11d-c4a9acde1148", "record_id": "flaws_cloudtrail:0000081:66b2880c-ad93-4d8c-a11d-c4a9acde1148", "row_index": 81, "timestamp": "2019-05-29T11:39:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66b2880c-ad93-4d8c-a11d-c4a9acde1148", "eventTime": "2019-05-29T11:39:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvQUtUVzVLaFg4d0RVT3ZyMDN1MkVrQUllajYwSWRpWkpOL2RsMngzSS94MU5hVFI2YUR5UGVjODhpVExxajc2eDA4YlJoQTNLYXpQcHo5YllXWmRKUlYvMUt4TlJLbzlxWUhYWDR2VVZEamEra1BNS1R6OHhmTHlUNVpJRTJEWnVMaW9TcEw1dUU5TnZ4TjdCaWcxWFNFSEllSlFYeXBHNWlibVFIYURqYUpDZGRsS0xQUlRSNiszdDFkZEJwc1pHWE11aDZsZDBRRzl5UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66b2880c-ad93-4d8c-a11d-c4a9acde1148", "record_id": "flaws_cloudtrail:0000082:66b2880c-ad93-4d8c-a11d-c4a9acde1148", "row_index": 82, "timestamp": "2019-05-29T11:39:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66b2880c-ad93-4d8c-a11d-c4a9acde1148", "eventTime": "2019-05-29T11:39:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvQUtUVzVLaFg4d0RVT3ZyMDN1MkVrQUllajYwSWRpWkpOL2RsMngzSS94MU5hVFI2YUR5UGVjODhpVExxajc2eDA4YlJoQTNLYXpQcHo5YllXWmRKUlYvMUt4TlJLbzlxWUhYWDR2VVZEamEra1BNS1R6OHhmTHlUNVpJRTJEWnVMaW9TcEw1dUU5TnZ4TjdCaWcxWFNFSEllSlFYeXBHNWlibVFIYURqYUpDZGRsS0xQUlRSNiszdDFkZEJwc1pHWE11aDZsZDBRRzl5UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af205b4d-af1e-4290-b80b-d02db616d112", "record_id": "flaws_cloudtrail:0000083:af205b4d-af1e-4290-b80b-d02db616d112", "row_index": 83, "timestamp": "2019-05-29T11:39:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af205b4d-af1e-4290-b80b-d02db616d112", "eventTime": "2019-05-29T11:39:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxbjRmckZUWGxlK3Q1aTVYTGhhaUpOY0RzYjFZQ0ltUDg4WFlHWnNhYjR1SjM2dkVnVkhLV3d2M3JTREhrdlptMnZvZS9uRjdIZTl0cTliZ3J2WTRnUklUZEkvRjNZT3VVRmlEMENPVWZVZmpXR0tLcDFDZnVBdjVoMGtQWWxDQ05ET2hGcFE2RjBGbGlDc1VtMHduM1hDdENKZy9odk1VaU4zNjNRNjN0c3FrczZWRUpHUkN2TEFVcURvaUZJQWdJMnNkVXVQK0FBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af205b4d-af1e-4290-b80b-d02db616d112", "record_id": "flaws_cloudtrail:0000084:af205b4d-af1e-4290-b80b-d02db616d112", "row_index": 84, "timestamp": "2019-05-29T11:39:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af205b4d-af1e-4290-b80b-d02db616d112", "eventTime": "2019-05-29T11:39:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxbjRmckZUWGxlK3Q1aTVYTGhhaUpOY0RzYjFZQ0ltUDg4WFlHWnNhYjR1SjM2dkVnVkhLV3d2M3JTREhrdlptMnZvZS9uRjdIZTl0cTliZ3J2WTRnUklUZEkvRjNZT3VVRmlEMENPVWZVZmpXR0tLcDFDZnVBdjVoMGtQWWxDQ05ET2hGcFE2RjBGbGlDc1VtMHduM1hDdENKZy9odk1VaU4zNjNRNjN0c3FrczZWRUpHUkN2TEFVcURvaUZJQWdJMnNkVXVQK0FBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa1e64ab-5a11-43f2-b73d-3cf92c1cf2af", "record_id": "flaws_cloudtrail:0000085:fa1e64ab-5a11-43f2-b73d-3cf92c1cf2af", "row_index": 85, "timestamp": "2019-05-29T11:39:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa1e64ab-5a11-43f2-b73d-3cf92c1cf2af", "eventTime": "2019-05-29T11:39:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3Z09WNDZoMUgwd3V1Vk5sY29kamx5OTE3d1FxMlNCUjY1RW9CY3gyZkpacHlrL0xpZWN2bWxaZGJYcDVXYWlJNnJhcFcrRWRjOTlaZUxGRmE2bUEvRHI3ekJkZUZaLzdIUWoySjBlQzZ1dVlTTTc0RDlvU1hBZFBMeDJBeVREcWJsS2VWRW9rL2xaaUhmSWVLWmFOSTYzOERIanRiTjdVbWZQbUhxNWtsYVRYaEN3WE1sSVJCZGxncUNtRnZSbVEvTUtpZDBqU1J3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa1e64ab-5a11-43f2-b73d-3cf92c1cf2af", "record_id": "flaws_cloudtrail:0000086:fa1e64ab-5a11-43f2-b73d-3cf92c1cf2af", "row_index": 86, "timestamp": "2019-05-29T11:39:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa1e64ab-5a11-43f2-b73d-3cf92c1cf2af", "eventTime": "2019-05-29T11:39:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3Z09WNDZoMUgwd3V1Vk5sY29kamx5OTE3d1FxMlNCUjY1RW9CY3gyZkpacHlrL0xpZWN2bWxaZGJYcDVXYWlJNnJhcFcrRWRjOTlaZUxGRmE2bUEvRHI3ekJkZUZaLzdIUWoySjBlQzZ1dVlTTTc0RDlvU1hBZFBMeDJBeVREcWJsS2VWRW9rL2xaaUhmSWVLWmFOSTYzOERIanRiTjdVbWZQbUhxNWtsYVRYaEN3WE1sSVJCZGxncUNtRnZSbVEvTUtpZDBqU1J3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ecad499-ff4c-4f2b-a6c3-4873af98bcc3", "record_id": "flaws_cloudtrail:0000087:8ecad499-ff4c-4f2b-a6c3-4873af98bcc3", "row_index": 87, "timestamp": "2019-05-29T11:39:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ecad499-ff4c-4f2b-a6c3-4873af98bcc3", "eventTime": "2019-05-29T11:39:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIS3ZsaXFPVURRcWM4Njd2Q0ZEYUw4Ti8ybGVleVRmZ2oyclE4WmlUZXJ1ZTFDT1p2TVcyVWFaZ1JzenNYQWVTL2NIVG9XanFRQlc3L1hGekVIRkNlbG0wN3hRRUc0Ylp6WFZNcWtpMUx3N1RKK1lBc1NkeVQxL2ZEY0hGckdmRzNLRkM4c2czSGJHTU9xcnIxRUNEcHAyazBvaFlNcmRMVmwvV0t3dXBSMzhMcHEyQ3czSUJSa1VIOEdvdXZkVk5GMHZZVzdib21abElRUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ecad499-ff4c-4f2b-a6c3-4873af98bcc3", "record_id": "flaws_cloudtrail:0000088:8ecad499-ff4c-4f2b-a6c3-4873af98bcc3", "row_index": 88, "timestamp": "2019-05-29T11:39:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ecad499-ff4c-4f2b-a6c3-4873af98bcc3", "eventTime": "2019-05-29T11:39:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIS3ZsaXFPVURRcWM4Njd2Q0ZEYUw4Ti8ybGVleVRmZ2oyclE4WmlUZXJ1ZTFDT1p2TVcyVWFaZ1JzenNYQWVTL2NIVG9XanFRQlc3L1hGekVIRkNlbG0wN3hRRUc0Ylp6WFZNcWtpMUx3N1RKK1lBc1NkeVQxL2ZEY0hGckdmRzNLRkM4c2czSGJHTU9xcnIxRUNEcHAyazBvaFlNcmRMVmwvV0t3dXBSMzhMcHEyQ3czSUJSa1VIOEdvdXZkVk5GMHZZVzdib21abElRUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "981b46ca-366d-44f5-a257-bd5f73fa56cb", "record_id": "flaws_cloudtrail:0000089:981b46ca-366d-44f5-a257-bd5f73fa56cb", "row_index": 89, "timestamp": "2019-05-29T11:39:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "981b46ca-366d-44f5-a257-bd5f73fa56cb", "eventTime": "2019-05-29T11:39:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJdzE4NG8yTFI2dGxtT1VIcDlDd3BQdUErdWJqUURLa1dDU1Q1U0RZRWlVdW5LQXhsNHhLUTVvTEFrd1hxWDZCSHcwOUZucHVDaXlSaFRGSmpXVys4WVoxUFhGcWh6SlFlYitNdTdRMFFyUVkwODZjRFFpS3h3Ti9ieTVHNlA4VlcydEtYUGdGWEdwMHZrKzVra0tvZUFVa0FMYWgvUnpOTXk4YjN6Y3RkcnVJWnBLcXY5VHN4bVg3RVF6TTg3U09PL294NDhweXBSdU5sQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "981b46ca-366d-44f5-a257-bd5f73fa56cb", "record_id": "flaws_cloudtrail:0000090:981b46ca-366d-44f5-a257-bd5f73fa56cb", "row_index": 90, "timestamp": "2019-05-29T11:39:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "981b46ca-366d-44f5-a257-bd5f73fa56cb", "eventTime": "2019-05-29T11:39:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJdzE4NG8yTFI2dGxtT1VIcDlDd3BQdUErdWJqUURLa1dDU1Q1U0RZRWlVdW5LQXhsNHhLUTVvTEFrd1hxWDZCSHcwOUZucHVDaXlSaFRGSmpXVys4WVoxUFhGcWh6SlFlYitNdTdRMFFyUVkwODZjRFFpS3h3Ti9ieTVHNlA4VlcydEtYUGdGWEdwMHZrKzVra0tvZUFVa0FMYWgvUnpOTXk4YjN6Y3RkcnVJWnBLcXY5VHN4bVg3RVF6TTg3U09PL294NDhweXBSdU5sQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28d269947-36d1-47c4-ae70-20b45c1d4057", "record_id": "flaws_cloudtrail:0000091:28d269947-36d1-47c4-ae70-20b45c1d4057", "row_index": 91, "timestamp": "2019-05-29T11:39:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28d269947-36d1-47c4-ae70-20b45c1d4057", "eventTime": "2019-05-29T11:39:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWeGVFaVFjVU1qMU9hYnc4aGRKR1puZ2dleWFYa0VNcjMyZHVIeWU0U1d3TnIzMkVKTGQyaVNUYXE5b3FZeitwQ0k5bnl4azViNnY2TzNOZU1kUmNiWTV1SE1WbXlmaG9UNm5VR0luYy83bVlTWGVReWtvVGdWd2lUaERESFpaanRPYTRjRW1NamViQ3RWQk0vc2V0RXQwQUtpeGlsU25Pc0ZYTy84dk9jYkhsV0dpSkR5cXFoNC9uYWZMSWdMRXlHdVBpKzRrcWlEUGE5UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28d269947-36d1-47c4-ae70-20b45c1d4057", "record_id": "flaws_cloudtrail:0000092:28d269947-36d1-47c4-ae70-20b45c1d4057", "row_index": 92, "timestamp": "2019-05-29T11:39:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28d269947-36d1-47c4-ae70-20b45c1d4057", "eventTime": "2019-05-29T11:39:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWeGVFaVFjVU1qMU9hYnc4aGRKR1puZ2dleWFYa0VNcjMyZHVIeWU0U1d3TnIzMkVKTGQyaVNUYXE5b3FZeitwQ0k5bnl4azViNnY2TzNOZU1kUmNiWTV1SE1WbXlmaG9UNm5VR0luYy83bVlTWGVReWtvVGdWd2lUaERESFpaanRPYTRjRW1NamViQ3RWQk0vc2V0RXQwQUtpeGlsU25Pc0ZYTy84dk9jYkhsV0dpSkR5cXFoNC9uYWZMSWdMRXlHdVBpKzRrcWlEUGE5UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b1f8692-6fb8-4743-bdec-df4ba4d8c740", "record_id": "flaws_cloudtrail:0000093:0b1f8692-6fb8-4743-bdec-df4ba4d8c740", "row_index": 93, "timestamp": "2019-05-29T11:39:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b1f8692-6fb8-4743-bdec-df4ba4d8c740", "eventTime": "2019-05-29T11:39:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaTE1xMWVQZ0pRUW44TW1yQ0FMeVBiZk42djJKSDkzQ1dpQ0c3cGZCaGFGcjYzbGhZSEpMaTV3a0ZYWFBmWXB4ZWpGTmd5eUsvUXZYcFlWbG5MdTlIV01EV0RIQ2VrUkZFUkVCcWlZcjlvWkhZczUzUXZ6Z0JId3UvNlV0V204b2w2RUYvNlQ1YVdlakdjd04wVGZPbmt2TkU5RFlFSVlqQ1d6NmtDN2d0YmdHM3plMXY2T3ZZVmNHcFF3a0RIMGcxMGRwckEvd0NaZDBGUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b1f8692-6fb8-4743-bdec-df4ba4d8c740", "record_id": "flaws_cloudtrail:0000094:0b1f8692-6fb8-4743-bdec-df4ba4d8c740", "row_index": 94, "timestamp": "2019-05-29T11:39:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b1f8692-6fb8-4743-bdec-df4ba4d8c740", "eventTime": "2019-05-29T11:39:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaTE1xMWVQZ0pRUW44TW1yQ0FMeVBiZk42djJKSDkzQ1dpQ0c3cGZCaGFGcjYzbGhZSEpMaTV3a0ZYWFBmWXB4ZWpGTmd5eUsvUXZYcFlWbG5MdTlIV01EV0RIQ2VrUkZFUkVCcWlZcjlvWkhZczUzUXZ6Z0JId3UvNlV0V204b2w2RUYvNlQ1YVdlakdjd04wVGZPbmt2TkU5RFlFSVlqQ1d6NmtDN2d0YmdHM3plMXY2T3ZZVmNHcFF3a0RIMGcxMGRwckEvd0NaZDBGUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "930a8dba-56b7-4d49-8651-33ac819c118a", "record_id": "flaws_cloudtrail:0000095:930a8dba-56b7-4d49-8651-33ac819c118a", "row_index": 95, "timestamp": "2019-05-29T11:39:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "930a8dba-56b7-4d49-8651-33ac819c118a", "eventTime": "2019-05-29T11:39:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVR2x3MzFmR2dVYUFFeW9QdmN1YUN6WEc4WG1heHBHaTNoZE5iZUxqYW1kdUxuamZYdHZBcm5ySVdydis5dDErWm1qN2tJZXJLc2w5TmtSeHVIOEt2N21ZRElMa1hISTRmWTNUdEcvZTMvWW1TVHpodEtCaGVIZUdtV1luanZZdGxzWlFnNG12L2lQaFZKaGROT1NteEZwRGhjeU4xRFpGUEtTWVFmeE5JTmdQcFAvVWFmUUtKcFZzWEFCV2dOckcyZUFUb2JNTG9zWFJydz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "930a8dba-56b7-4d49-8651-33ac819c118a", "record_id": "flaws_cloudtrail:0000096:930a8dba-56b7-4d49-8651-33ac819c118a", "row_index": 96, "timestamp": "2019-05-29T11:39:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "930a8dba-56b7-4d49-8651-33ac819c118a", "eventTime": "2019-05-29T11:39:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVR2x3MzFmR2dVYUFFeW9QdmN1YUN6WEc4WG1heHBHaTNoZE5iZUxqYW1kdUxuamZYdHZBcm5ySVdydis5dDErWm1qN2tJZXJLc2w5TmtSeHVIOEt2N21ZRElMa1hISTRmWTNUdEcvZTMvWW1TVHpodEtCaGVIZUdtV1luanZZdGxzWlFnNG12L2lQaFZKaGROT1NteEZwRGhjeU4xRFpGUEtTWVFmeE5JTmdQcFAvVWFmUUtKcFZzWEFCV2dOckcyZUFUb2JNTG9zWFJydz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80c010275-0aff-44ec-8c4f-c182980e173a", "record_id": "flaws_cloudtrail:0000097:80c010275-0aff-44ec-8c4f-c182980e173a", "row_index": 97, "timestamp": "2019-05-29T11:39:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80c010275-0aff-44ec-8c4f-c182980e173a", "eventTime": "2019-05-29T11:39:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZVXUrai9iRFlWRnVsNGF6U2NiSkp4dFlIbzQ2SkhDK1dtenN1T1piS0dtUDA4amJGY3BFQ0dqOE5MbFd1NllpYXBCTVZzUm8xL3RQeit5WVBRWVZ6OWtKeGFxV05nS2k4ZUZaZkNETzJNUXRZenp4ZGMyMDJLMW05c2JQbXBPV05uSlRub29GOCtKT3RwUTMvTVo4TGxBejluaHp2NjlhU09YMHFDTldvZnhjWXBHTm1SZlN0UFFWbnBLYXlGdCtFd3lWUHZKWHd1NksxQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80c010275-0aff-44ec-8c4f-c182980e173a", "record_id": "flaws_cloudtrail:0000098:80c010275-0aff-44ec-8c4f-c182980e173a", "row_index": 98, "timestamp": "2019-05-29T11:39:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80c010275-0aff-44ec-8c4f-c182980e173a", "eventTime": "2019-05-29T11:39:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZVXUrai9iRFlWRnVsNGF6U2NiSkp4dFlIbzQ2SkhDK1dtenN1T1piS0dtUDA4amJGY3BFQ0dqOE5MbFd1NllpYXBCTVZzUm8xL3RQeit5WVBRWVZ6OWtKeGFxV05nS2k4ZUZaZkNETzJNUXRZenp4ZGMyMDJLMW05c2JQbXBPV05uSlRub29GOCtKT3RwUTMvTVo4TGxBejluaHp2NjlhU09YMHFDTldvZnhjWXBHTm1SZlN0UFFWbnBLYXlGdCtFd3lWUHZKWHd1NksxQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6965f83-7378-4e8e-9fc5-768d58a7ff3e", "record_id": "flaws_cloudtrail:0000099:c6965f83-7378-4e8e-9fc5-768d58a7ff3e", "row_index": 99, "timestamp": "2019-05-29T11:39:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6965f83-7378-4e8e-9fc5-768d58a7ff3e", "eventTime": "2019-05-29T11:39:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxQzdUSzJ2ZFQyVldiUjhENFJDRkNkcmRZUGJxcURnUW5pUVdvdkFwSWd0S3NMak9pUk15aUNBUEVnd1JFSGg0MGdaL3F5V1R6WStsZFBYUUhMOWJ1eUR6QTc3ZUhBeWU5aDdnL0s4S1VWdlJXZTZscUVxTmF3VmNwM0dmaWN6VnM4Q3JkSXk4aGNvbWN4blA2Vmt2NGF6R1J3aGxTZFBLZE52YXVOa0NJbG8rODFsVHJ1NWRBbmZMWTRmL204T2FEQzB0SnFDVHlIUE83QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6965f83-7378-4e8e-9fc5-768d58a7ff3e", "record_id": "flaws_cloudtrail:0000100:c6965f83-7378-4e8e-9fc5-768d58a7ff3e", "row_index": 100, "timestamp": "2019-05-29T11:39:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6965f83-7378-4e8e-9fc5-768d58a7ff3e", "eventTime": "2019-05-29T11:39:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxQzdUSzJ2ZFQyVldiUjhENFJDRkNkcmRZUGJxcURnUW5pUVdvdkFwSWd0S3NMak9pUk15aUNBUEVnd1JFSGg0MGdaL3F5V1R6WStsZFBYUUhMOWJ1eUR6QTc3ZUhBeWU5aDdnL0s4S1VWdlJXZTZscUVxTmF3VmNwM0dmaWN6VnM4Q3JkSXk4aGNvbWN4blA2Vmt2NGF6R1J3aGxTZFBLZE52YXVOa0NJbG8rODFsVHJ1NWRBbmZMWTRmL204T2FEQzB0SnFDVHlIUE83QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df0314d9-f9dd-4ca1-91f9-9bc163accfe6", "record_id": "flaws_cloudtrail:0000101:df0314d9-f9dd-4ca1-91f9-9bc163accfe6", "row_index": 101, "timestamp": "2019-05-29T11:39:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df0314d9-f9dd-4ca1-91f9-9bc163accfe6", "eventTime": "2019-05-29T11:39:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2ZkNKdG55V0I1eUZMV2ZjODh6Q2kwRVpscGt4RFhIOUVaR3BVY240b0xQM3hpZUs4algyNjJ5VXF6Tk05UG1DQ1k0cTZ6bjFMVWJDU2F5cStZVEd5REsvZ2pHbUZxay9uYlkrZTJHK1VJYjNVSy9PempzU0s3YUMxVTVBdGJFVitBbGUwQ2FQM2s5Y2d4eVZTQUdxS0VKWGRZVjlYSEo4Yi9GOGRnblF6Q3JUU0tqMG5qZDNSemF2ZDJGWk5Kby85Q0MrUXZQV25uUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df0314d9-f9dd-4ca1-91f9-9bc163accfe6", "record_id": "flaws_cloudtrail:0000102:df0314d9-f9dd-4ca1-91f9-9bc163accfe6", "row_index": 102, "timestamp": "2019-05-29T11:39:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df0314d9-f9dd-4ca1-91f9-9bc163accfe6", "eventTime": "2019-05-29T11:39:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2ZkNKdG55V0I1eUZMV2ZjODh6Q2kwRVpscGt4RFhIOUVaR3BVY240b0xQM3hpZUs4algyNjJ5VXF6Tk05UG1DQ1k0cTZ6bjFMVWJDU2F5cStZVEd5REsvZ2pHbUZxay9uYlkrZTJHK1VJYjNVSy9PempzU0s3YUMxVTVBdGJFVitBbGUwQ2FQM2s5Y2d4eVZTQUdxS0VKWGRZVjlYSEo4Yi9GOGRnblF6Q3JUU0tqMG5qZDNSemF2ZDJGWk5Kby85Q0MrUXZQV25uUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07c77f1b-190f-4bd9-9983-dc10e24d6d06", "record_id": "flaws_cloudtrail:0000103:07c77f1b-190f-4bd9-9983-dc10e24d6d06", "row_index": 103, "timestamp": "2019-05-29T11:39:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07c77f1b-190f-4bd9-9983-dc10e24d6d06", "eventTime": "2019-05-29T11:39:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoRzF5NXdmZ2xzSUNpeExIRVorUmdmK3BkUzZqRnBvVlpRUk0wcDhLRTFLS3owT2l2UEJRK1dUTW1yQ3NXcmgySWdLM0Y1MFdPYVJIaXdDODRzbldSQlpsSU51TkFxOXBXWlJUQ1QyaFI5dVMwd2sxZGJkMmtBczl0bTFZdm0yekhiUmtVRDRieFlZQ25nVlcyK2FCTU1CMTdmL1BuekFtSDdYaFU4Mzl2eGhId3VkUldGNEd2UmhCeHFjZDF5YW53emtncER5R1V1ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07c77f1b-190f-4bd9-9983-dc10e24d6d06", "record_id": "flaws_cloudtrail:0000104:07c77f1b-190f-4bd9-9983-dc10e24d6d06", "row_index": 104, "timestamp": "2019-05-29T11:39:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07c77f1b-190f-4bd9-9983-dc10e24d6d06", "eventTime": "2019-05-29T11:39:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoRzF5NXdmZ2xzSUNpeExIRVorUmdmK3BkUzZqRnBvVlpRUk0wcDhLRTFLS3owT2l2UEJRK1dUTW1yQ3NXcmgySWdLM0Y1MFdPYVJIaXdDODRzbldSQlpsSU51TkFxOXBXWlJUQ1QyaFI5dVMwd2sxZGJkMmtBczl0bTFZdm0yekhiUmtVRDRieFlZQ25nVlcyK2FCTU1CMTdmL1BuekFtSDdYaFU4Mzl2eGhId3VkUldGNEd2UmhCeHFjZDF5YW53emtncER5R1V1ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bdc0308-74e5-469f-8602-fd9d1dba44a5", "record_id": "flaws_cloudtrail:0000105:5bdc0308-74e5-469f-8602-fd9d1dba44a5", "row_index": 105, "timestamp": "2019-05-29T11:39:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bdc0308-74e5-469f-8602-fd9d1dba44a5", "eventTime": "2019-05-29T11:39:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGSzdoRGtkNlRUalBjc1NkR0R0aWVuMWx3SWJvMElVbjYrUEl6V1I2bEdFTVZLSEVHZmpyNU5oQktQUTZYK2tjTlNpYnFEVENTby92VGJlaWo5b0FSMWh3dWRKRkFMN1F4bHpINnNtNUNCSTJtSENhRzJIdmlJb1dzL1dDcWJQRHVjSHBhSlV4dnlWVDY0MWh4d29wczJWZDU2akdmamtJcS9DRDVvTE9SSDhtREhyaTdNYml2TUFTYVRJSjIrY213Lyt6R2RxSzJ5UDRvS2k3K2VvWFFNRjQzeFBIazlNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c31222-f3b2-4749-93f4-e8c6cfc32183", "record_id": "flaws_cloudtrail:0000106:6c31222-f3b2-4749-93f4-e8c6cfc32183", "row_index": 106, "timestamp": "2019-05-29T11:39:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c31222-f3b2-4749-93f4-e8c6cfc32183", "eventTime": "2019-05-29T11:39:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvNFdMZmRTamlVQXU1clA5UnRUZTVJMytIeUVIb2FIK2N1SjhibXkwbzQ1ZkMrTk5GUzVRaWEybU9IUkJDR3BGamdFL2FzMmlpVnR3Y0dPV0hOcVpRWDBqelRNV2htUjZCWGVzalBNQU5VM1NaRi8yUHkwTmZwNjhGamxHWTVTNDdqQTNxRk9tQnVJU2w1R0QzS08wdWppWHpxcWk5bDdtM0VvTGE1ZlJJbjYwdWQ5bVdzai8wZFlpaFYzTk1vdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bdc0308-74e5-469f-8602-fd9d1dba44a5", "record_id": "flaws_cloudtrail:0000107:5bdc0308-74e5-469f-8602-fd9d1dba44a5", "row_index": 107, "timestamp": "2019-05-29T11:39:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bdc0308-74e5-469f-8602-fd9d1dba44a5", "eventTime": "2019-05-29T11:39:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGSzdoRGtkNlRUalBjc1NkR0R0aWVuMWx3SWJvMElVbjYrUEl6V1I2bEdFTVZLSEVHZmpyNU5oQktQUTZYK2tjTlNpYnFEVENTby92VGJlaWo5b0FSMWh3dWRKRkFMN1F4bHpINnNtNUNCSTJtSENhRzJIdmlJb1dzL1dDcWJQRHVjSHBhSlV4dnlWVDY0MWh4d29wczJWZDU2akdmamtJcS9DRDVvTE9SSDhtREhyaTdNYml2TUFTYVRJSjIrY213Lyt6R2RxSzJ5UDRvS2k3K2VvWFFNRjQzeFBIazlNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c31222-f3b2-4749-93f4-e8c6cfc32183", "record_id": "flaws_cloudtrail:0000108:6c31222-f3b2-4749-93f4-e8c6cfc32183", "row_index": 108, "timestamp": "2019-05-29T11:39:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c31222-f3b2-4749-93f4-e8c6cfc32183", "eventTime": "2019-05-29T11:39:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvNFdMZmRTamlVQXU1clA5UnRUZTVJMytIeUVIb2FIK2N1SjhibXkwbzQ1ZkMrTk5GUzVRaWEybU9IUkJDR3BGamdFL2FzMmlpVnR3Y0dPV0hOcVpRWDBqelRNV2htUjZCWGVzalBNQU5VM1NaRi8yUHkwTmZwNjhGamxHWTVTNDdqQTNxRk9tQnVJU2w1R0QzS08wdWppWHpxcWk5bDdtM0VvTGE1ZlJJbjYwdWQ5bVdzai8wZFlpaFYzTk1vdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "032e9a5e-bce2-41ce-8cf1-c2743b2bcd2a", "record_id": "flaws_cloudtrail:0000109:032e9a5e-bce2-41ce-8cf1-c2743b2bcd2a", "row_index": 109, "timestamp": "2019-05-29T11:39:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "032e9a5e-bce2-41ce-8cf1-c2743b2bcd2a", "eventTime": "2019-05-29T11:39:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzRlI4dTI4cUhJWkJNQVQ5MFYyWVhEV0xUL0ZLRWFvbEd1S3Z2OEJPcmdtQ3hReGpNWDl4STRHNU9hRnBOOHFyWW1tYTBhNmk3MEtBREpsVDBWaHpoL1NEblpPZ093aVFjcjVHMSs5WWVvSUpPdGUrRW9DTGZPMDdDNU1oZEN0MHNUYW51U2VtbmVZS0Q0T1NNbkxuSklRaU5CY1EvMGhBb09IREtIeUdYMGZRVldJWENPbENpenN1aTFJYVlIWUk4cG5sWmtqdFRKNU5XMTE4cmNoL3Zld1hxQWt6UDFFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "032e9a5e-bce2-41ce-8cf1-c2743b2bcd2a", "record_id": "flaws_cloudtrail:0000110:032e9a5e-bce2-41ce-8cf1-c2743b2bcd2a", "row_index": 110, "timestamp": "2019-05-29T11:39:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "032e9a5e-bce2-41ce-8cf1-c2743b2bcd2a", "eventTime": "2019-05-29T11:39:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzRlI4dTI4cUhJWkJNQVQ5MFYyWVhEV0xUL0ZLRWFvbEd1S3Z2OEJPcmdtQ3hReGpNWDl4STRHNU9hRnBOOHFyWW1tYTBhNmk3MEtBREpsVDBWaHpoL1NEblpPZ093aVFjcjVHMSs5WWVvSUpPdGUrRW9DTGZPMDdDNU1oZEN0MHNUYW51U2VtbmVZS0Q0T1NNbkxuSklRaU5CY1EvMGhBb09IREtIeUdYMGZRVldJWENPbENpenN1aTFJYVlIWUk4cG5sWmtqdFRKNU5XMTE4cmNoL3Zld1hxQWt6UDFFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2fedc8a-0c48-46b8-afe7-eeba120907d5e", "record_id": "flaws_cloudtrail:0000111:f2fedc8a-0c48-46b8-afe7-eeba120907d5e", "row_index": 111, "timestamp": "2019-05-29T11:39:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2fedc8a-0c48-46b8-afe7-eeba120907d5e", "eventTime": "2019-05-29T11:39:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRZzRDdUtsTUdaUm1tSnRmNHBBaDRmMGtwUjVjdkR5R0NYMlEyRlV5T0k4NC9jcEVabW56N0FBZjgxUnBnMDM4aUNPcmVoS0owOG1CNFJIQjVCc05JU3VaYU1xUTNEMUgyV1Y2MlBrVzFqd1JGR0dFLzNLSkVTUXVwRllUSDlvc0hDZVcySGRkb3hWWWgxb3NnMkVOZU01UXZqbGMzRXYrcjlYNHpaampmNERrcWZIbGN4MTNUR3VKdDd3U2taUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2fedc8a-0c48-46b8-afe7-eeba120907d5e", "record_id": "flaws_cloudtrail:0000112:f2fedc8a-0c48-46b8-afe7-eeba120907d5e", "row_index": 112, "timestamp": "2019-05-29T11:39:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2fedc8a-0c48-46b8-afe7-eeba120907d5e", "eventTime": "2019-05-29T11:39:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRZzRDdUtsTUdaUm1tSnRmNHBBaDRmMGtwUjVjdkR5R0NYMlEyRlV5T0k4NC9jcEVabW56N0FBZjgxUnBnMDM4aUNPcmVoS0owOG1CNFJIQjVCc05JU3VaYU1xUTNEMUgyV1Y2MlBrVzFqd1JGR0dFLzNLSkVTUXVwRllUSDlvc0hDZVcySGRkb3hWWWgxb3NnMkVOZU01UXZqbGMzRXYrcjlYNHpaampmNERrcWZIbGN4MTNUR3VKdDd3U2taUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5267f4cc-ae1c-4903-9522-af0b0c6faed3", "record_id": "flaws_cloudtrail:0000113:5267f4cc-ae1c-4903-9522-af0b0c6faed3", "row_index": 113, "timestamp": "2019-05-29T11:39:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5267f4cc-ae1c-4903-9522-af0b0c6faed3", "eventTime": "2019-05-29T11:39:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWcGhjN3p5TS9lcFdNUkU5ZkVsUUhDMlI0SlVLbVdaT0RwQVFRRlFWb3ZaODFmTW5KQmpFYm5iVzNjbmVIOHl6bHpsRHcwaElKVTBqYnNRUHhWV3ZGUzRQd0ZpZXdjRkRLT2EvUHlCY3VVRWRjZ1pETk5EdlBsUmlYdGdaUUQ4RnJ6VUZuNjVmOGR2SWZGbm85YVFDSmUxOGRWT2J0WHhNZEQycFhQVW1CajA2S3JEdDBZUktjZTA1QU80eDQ4OD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35381-a1f2-4052-8776-5820cc92bf4a", "record_id": "flaws_cloudtrail:0000114:35381-a1f2-4052-8776-5820cc92bf4a", "row_index": 114, "timestamp": "2019-05-29T11:39:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35381-a1f2-4052-8776-5820cc92bf4a", "eventTime": "2019-05-29T11:39:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOSDVHbExldm9VeThRQWRKQ2tIeFRjS3E0aFFwQmdYNUsyR243c0c5YmQwdzdSby84U3RNQVhJM3crZEx3RnZmaUVsMWFmcUk0TFVLbG85enBJUWtKV25GSzZFUFEzaUI1WnhveC9TTVAvS1BocWFRYTFUdkZUckw1U3ZLa0UzbXdXYjMvS1U3UFhlby8xbWZLNU4wQ3BkbVJYR1dKVS9MSkluMkljK212RDNjYVU5TDMxSmVrWDVkM0hvWTlPaGRiSSthcXlVQVZNOUtLTTVFd21GWXNDZDl6Tk9Pbkh3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5267f4cc-ae1c-4903-9522-af0b0c6faed3", "record_id": "flaws_cloudtrail:0000115:5267f4cc-ae1c-4903-9522-af0b0c6faed3", "row_index": 115, "timestamp": "2019-05-29T11:39:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5267f4cc-ae1c-4903-9522-af0b0c6faed3", "eventTime": "2019-05-29T11:39:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWcGhjN3p5TS9lcFdNUkU5ZkVsUUhDMlI0SlVLbVdaT0RwQVFRRlFWb3ZaODFmTW5KQmpFYm5iVzNjbmVIOHl6bHpsRHcwaElKVTBqYnNRUHhWV3ZGUzRQd0ZpZXdjRkRLT2EvUHlCY3VVRWRjZ1pETk5EdlBsUmlYdGdaUUQ4RnJ6VUZuNjVmOGR2SWZGbm85YVFDSmUxOGRWT2J0WHhNZEQycFhQVW1CajA2S3JEdDBZUktjZTA1QU80eDQ4OD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35381-a1f2-4052-8776-5820cc92bf4a", "record_id": "flaws_cloudtrail:0000116:35381-a1f2-4052-8776-5820cc92bf4a", "row_index": 116, "timestamp": "2019-05-29T11:39:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35381-a1f2-4052-8776-5820cc92bf4a", "eventTime": "2019-05-29T11:39:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOSDVHbExldm9VeThRQWRKQ2tIeFRjS3E0aFFwQmdYNUsyR243c0c5YmQwdzdSby84U3RNQVhJM3crZEx3RnZmaUVsMWFmcUk0TFVLbG85enBJUWtKV25GSzZFUFEzaUI1WnhveC9TTVAvS1BocWFRYTFUdkZUckw1U3ZLa0UzbXdXYjMvS1U3UFhlby8xbWZLNU4wQ3BkbVJYR1dKVS9MSkluMkljK212RDNjYVU5TDMxSmVrWDVkM0hvWTlPaGRiSSthcXlVQVZNOUtLTTVFd21GWXNDZDl6Tk9Pbkh3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ee4540e-a439-4f3f-a6d1-df3016eba621", "record_id": "flaws_cloudtrail:0000117:8ee4540e-a439-4f3f-a6d1-df3016eba621", "row_index": 117, "timestamp": "2019-05-29T11:39:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ee4540e-a439-4f3f-a6d1-df3016eba621", "eventTime": "2019-05-29T11:39:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDOEE0eFUzY0pUSWIzTlRBMTZqanRTYU9NN2o3V0I3TC9UZWpLM3gzVHk5dTRjWUtvdnJ3ZytKMk9vTEJmSEFLL0NsVkVpWWIvT0J1alJtV05WTVhGdFJCMXNRZlRFV2xudG1UNWlVc0tWSzdkOXpOV2RneVdhS3VjVlA4dDFZUXlqaHlVSERhSkdWeUR2Q0dtcmd1UGU3dTYwaWJSZzVsem1iOWM3aG45VEhjWG9wWDVSUHVaVkp5a09NWFhMdnRjMDRMOUQydjlCenpBbkVDRWxHNFU5aVdiTzVRTTZFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ee4540e-a439-4f3f-a6d1-df3016eba621", "record_id": "flaws_cloudtrail:0000118:8ee4540e-a439-4f3f-a6d1-df3016eba621", "row_index": 118, "timestamp": "2019-05-29T11:39:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ee4540e-a439-4f3f-a6d1-df3016eba621", "eventTime": "2019-05-29T11:39:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDOEE0eFUzY0pUSWIzTlRBMTZqanRTYU9NN2o3V0I3TC9UZWpLM3gzVHk5dTRjWUtvdnJ3ZytKMk9vTEJmSEFLL0NsVkVpWWIvT0J1alJtV05WTVhGdFJCMXNRZlRFV2xudG1UNWlVc0tWSzdkOXpOV2RneVdhS3VjVlA4dDFZUXlqaHlVSERhSkdWeUR2Q0dtcmd1UGU3dTYwaWJSZzVsem1iOWM3aG45VEhjWG9wWDVSUHVaVkp5a09NWFhMdnRjMDRMOUQydjlCenpBbkVDRWxHNFU5aVdiTzVRTTZFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "947abd23-5a30-4d8d-b4c7-d41cad84e711", "record_id": "flaws_cloudtrail:0000119:947abd23-5a30-4d8d-b4c7-d41cad84e711", "row_index": 119, "timestamp": "2019-05-29T11:39:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "947abd23-5a30-4d8d-b4c7-d41cad84e711", "eventTime": "2019-05-29T11:39:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzUjQ5Q2tvam5EVk1BT05zSm9YVjRRRVh2TnJZWk54WHRUZWR4WFFKaFFsUmlTUzNhZndYbk1rbHRCT0IxRTUrRjRrdjkrenB1cS9yR2plMXhYTDhiSFBoS0ZERjVoYzZHTUMxTVpJM1lwdm5ZVlNhbHBVQ2s0SDRJdjZMK3gyMEhYZDNWNmpmS21tdjl3WGtQdEtFelR4K3NWcDlGMEliZmNTRUJoS0prMW5Za0kzMlFJRndjcHphb0hzYXhXR1lLSERodlFjR3U3MllLY1dxTG01d3lRUEpuYkIrNE1FPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46e20dcb-9ecb-44cc-aa37-2444b7d319341", "record_id": "flaws_cloudtrail:0000120:46e20dcb-9ecb-44cc-aa37-2444b7d319341", "row_index": 120, "timestamp": "2019-05-29T11:39:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46e20dcb-9ecb-44cc-aa37-2444b7d319341", "eventTime": "2019-05-29T11:39:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaM0xxWnNNcVN3Z3c0SHNxMjV5ajFpbytYVUdWWk5RVEtqOGFqUHgzNTRyUkxyaWlDY1dJMFJSb3ZaTkExYUl0dkJXWW9uaGdjZTNRdm5PZjhwZGZ4THdKZFB6eGRuU0pUUUh1ZTdsSUZldi9NZEh1Yy9XWTFXcmxKTEVQLytJWWZpOTBoZytCQUtTYTcvZm8zMERPcEJ1SE8wUDhOcFh2bGw5MmZwbHZWYlpnSUN2RWh2bFVhSCtrRkpkQ2RCZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "947abd23-5a30-4d8d-b4c7-d41cad84e711", "record_id": "flaws_cloudtrail:0000121:947abd23-5a30-4d8d-b4c7-d41cad84e711", "row_index": 121, "timestamp": "2019-05-29T11:39:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "947abd23-5a30-4d8d-b4c7-d41cad84e711", "eventTime": "2019-05-29T11:39:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzUjQ5Q2tvam5EVk1BT05zSm9YVjRRRVh2TnJZWk54WHRUZWR4WFFKaFFsUmlTUzNhZndYbk1rbHRCT0IxRTUrRjRrdjkrenB1cS9yR2plMXhYTDhiSFBoS0ZERjVoYzZHTUMxTVpJM1lwdm5ZVlNhbHBVQ2s0SDRJdjZMK3gyMEhYZDNWNmpmS21tdjl3WGtQdEtFelR4K3NWcDlGMEliZmNTRUJoS0prMW5Za0kzMlFJRndjcHphb0hzYXhXR1lLSERodlFjR3U3MllLY1dxTG01d3lRUEpuYkIrNE1FPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46e20dcb-9ecb-44cc-aa37-2444b7d319341", "record_id": "flaws_cloudtrail:0000122:46e20dcb-9ecb-44cc-aa37-2444b7d319341", "row_index": 122, "timestamp": "2019-05-29T11:39:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46e20dcb-9ecb-44cc-aa37-2444b7d319341", "eventTime": "2019-05-29T11:39:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaM0xxWnNNcVN3Z3c0SHNxMjV5ajFpbytYVUdWWk5RVEtqOGFqUHgzNTRyUkxyaWlDY1dJMFJSb3ZaTkExYUl0dkJXWW9uaGdjZTNRdm5PZjhwZGZ4THdKZFB6eGRuU0pUUUh1ZTdsSUZldi9NZEh1Yy9XWTFXcmxKTEVQLytJWWZpOTBoZytCQUtTYTcvZm8zMERPcEJ1SE8wUDhOcFh2bGw5MmZwbHZWYlpnSUN2RWh2bFVhSCtrRkpkQ2RCZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14ec3b5c-bffa-4480-96c9-076821f644dd", "record_id": "flaws_cloudtrail:0000123:14ec3b5c-bffa-4480-96c9-076821f644dd", "row_index": 123, "timestamp": "2019-05-29T11:39:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14ec3b5c-bffa-4480-96c9-076821f644dd", "eventTime": "2019-05-29T11:39:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUVSt5K1RLMzBPN2pESmYrQ2VaK1hXamRkekttQm1idjE0OUlHdDhBN0Zsa1ltcDFOVkhYQ1hNeFcxSzA3UllmTVlTdURvVDgyL3psR05ZUTRQYnFMVUQ4VDY0anVaNXd6TkRhSFhkMm8zbUpLbWRGYUN3YmpjREsyWGFteUdDbVFoaFIxajA2VXkrQ3hZelB4UnlxKzhhVm5lMU9QdHFML05xeUpDNlZxREUycXlCaFhyL1RWRXJpQitLbWtIND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14ec3b5c-bffa-4480-96c9-076821f644dd", "record_id": "flaws_cloudtrail:0000124:14ec3b5c-bffa-4480-96c9-076821f644dd", "row_index": 124, "timestamp": "2019-05-29T11:39:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14ec3b5c-bffa-4480-96c9-076821f644dd", "eventTime": "2019-05-29T11:39:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUVSt5K1RLMzBPN2pESmYrQ2VaK1hXamRkekttQm1idjE0OUlHdDhBN0Zsa1ltcDFOVkhYQ1hNeFcxSzA3UllmTVlTdURvVDgyL3psR05ZUTRQYnFMVUQ4VDY0anVaNXd6TkRhSFhkMm8zbUpLbWRGYUN3YmpjREsyWGFteUdDbVFoaFIxajA2VXkrQ3hZelB4UnlxKzhhVm5lMU9QdHFML05xeUpDNlZxREUycXlCaFhyL1RWRXJpQitLbWtIND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "211494c-1dc6-4675-9ca5-a1cfe54275ef", "record_id": "flaws_cloudtrail:0000125:211494c-1dc6-4675-9ca5-a1cfe54275ef", "row_index": 125, "timestamp": "2019-05-29T11:49:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "211494c-1dc6-4675-9ca5-a1cfe54275ef", "eventTime": "2019-05-29T11:49:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "211494c-1dc6-4675-9ca5-a1cfe54275ef", "record_id": "flaws_cloudtrail:0000126:211494c-1dc6-4675-9ca5-a1cfe54275ef", "row_index": 126, "timestamp": "2019-05-29T11:49:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "211494c-1dc6-4675-9ca5-a1cfe54275ef", "eventTime": "2019-05-29T11:49:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1e797e2-4f4c-4cad-b749-b455dca2da71", "record_id": "flaws_cloudtrail:0000127:e1e797e2-4f4c-4cad-b749-b455dca2da71", "row_index": 127, "timestamp": "2019-05-29T12:09:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1e797e2-4f4c-4cad-b749-b455dca2da71", "eventTime": "2019-05-29T12:09:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1e797e2-4f4c-4cad-b749-b455dca2da71", "record_id": "flaws_cloudtrail:0000128:e1e797e2-4f4c-4cad-b749-b455dca2da71", "row_index": 128, "timestamp": "2019-05-29T12:09:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1e797e2-4f4c-4cad-b749-b455dca2da71", "eventTime": "2019-05-29T12:09:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb407af4-6316-4f8f-b412-5ef1ef7c84fa", "record_id": "flaws_cloudtrail:0000129:bb407af4-6316-4f8f-b412-5ef1ef7c84fa", "row_index": 129, "timestamp": "2019-05-29T12:13:18Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb407af4-6316-4f8f-b412-5ef1ef7c84fa", "eventTime": "2019-05-29T12:13:18Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb407af4-6316-4f8f-b412-5ef1ef7c84fa", "record_id": "flaws_cloudtrail:0000130:bb407af4-6316-4f8f-b412-5ef1ef7c84fa", "row_index": 130, "timestamp": "2019-05-29T12:13:18Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb407af4-6316-4f8f-b412-5ef1ef7c84fa", "eventTime": "2019-05-29T12:13:18Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "343c6ee7-4a7b-4751-b959-df0ec68d2440", "record_id": "flaws_cloudtrail:0000131:343c6ee7-4a7b-4751-b959-df0ec68d2440", "row_index": 131, "timestamp": "2019-05-29T12:14:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "343c6ee7-4a7b-4751-b959-df0ec68d2440", "eventTime": "2019-05-29T12:14:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "343c6ee7-4a7b-4751-b959-df0ec68d2440", "record_id": "flaws_cloudtrail:0000132:343c6ee7-4a7b-4751-b959-df0ec68d2440", "row_index": 132, "timestamp": "2019-05-29T12:14:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "343c6ee7-4a7b-4751-b959-df0ec68d2440", "eventTime": "2019-05-29T12:14:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddbd1227-8d31-45cf-b04a-117a7cc0914a", "record_id": "flaws_cloudtrail:0000133:ddbd1227-8d31-45cf-b04a-117a7cc0914a", "row_index": 133, "timestamp": "2019-05-29T12:15:22Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1542, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddbd1227-8d31-45cf-b04a-117a7cc0914a", "eventTime": "2019-05-29T12:15:22Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: FCfWJARljCf9fO0SycLngR9PPgn-qvWZMIa1GQaMh9SEcGA3JyYdsAGTQM1Ur77qK6ieeD8vb99qAGOD1gbGB8OgKaIOhwy-P3_aewEX3V4BPVTjSJyqRWx6hLyGPbS2wkillYPQ3aU0L5P3Nf1y1OvrHCB3Bj0sPFrLwsqlRaGg5x5HuLQZ7a9F9EBfzvCKPvPnOIQMB-aWGaMVbrJjomK_cdHKxfaApHCzTnwsIHt-GIQjWFgxdHQ-qqzAVSq9OjspYuJ2BKF7RMBkEHX0FsHFRDB4qyT7hgzu4bGCo4wjCO6aJR4zC5m3ITc_L2Kep7dTQgDXQtbE49j5tz8h7Rn4eOrTOwBEw5M9s-LycoyWjiMSsa7jAgA1724VR0hwNAGBLY1z68UbUMkAjT97Vy3M9qU9fLVpznA9tBs24y230wrtMR1mWPRBQ8RCM_xKTGsKNXTTpNNo4TlDhkP3jP_SZgY4IugHICwFdaXcW9GG3m5DbL7-C5LO9Xlf9NAP82OXRm3hgqFaik5g9cyvhnPTtk_fwGMwTxv5Nx5nA39pr91zRrYN27V6ahP7PQ6kX-iY78WXYbbcwlt8WMBanHMt_qBoNHK_oejz9ob0j967DVpBjISHTTmz7-fTAM-Nc361pLBnDA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"size": "10", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddbd1227-8d31-45cf-b04a-117a7cc0914a", "record_id": "flaws_cloudtrail:0000134:ddbd1227-8d31-45cf-b04a-117a7cc0914a", "row_index": 134, "timestamp": "2019-05-29T12:15:22Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1542, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddbd1227-8d31-45cf-b04a-117a7cc0914a", "eventTime": "2019-05-29T12:15:22Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: FCfWJARljCf9fO0SycLngR9PPgn-qvWZMIa1GQaMh9SEcGA3JyYdsAGTQM1Ur77qK6ieeD8vb99qAGOD1gbGB8OgKaIOhwy-P3_aewEX3V4BPVTjSJyqRWx6hLyGPbS2wkillYPQ3aU0L5P3Nf1y1OvrHCB3Bj0sPFrLwsqlRaGg5x5HuLQZ7a9F9EBfzvCKPvPnOIQMB-aWGaMVbrJjomK_cdHKxfaApHCzTnwsIHt-GIQjWFgxdHQ-qqzAVSq9OjspYuJ2BKF7RMBkEHX0FsHFRDB4qyT7hgzu4bGCo4wjCO6aJR4zC5m3ITc_L2Kep7dTQgDXQtbE49j5tz8h7Rn4eOrTOwBEw5M9s-LycoyWjiMSsa7jAgA1724VR0hwNAGBLY1z68UbUMkAjT97Vy3M9qU9fLVpznA9tBs24y230wrtMR1mWPRBQ8RCM_xKTGsKNXTTpNNo4TlDhkP3jP_SZgY4IugHICwFdaXcW9GG3m5DbL7-C5LO9Xlf9NAP82OXRm3hgqFaik5g9cyvhnPTtk_fwGMwTxv5Nx5nA39pr91zRrYN27V6ahP7PQ6kX-iY78WXYbbcwlt8WMBanHMt_qBoNHK_oejz9ob0j967DVpBjISHTTmz7-fTAM-Nc361pLBnDA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"size": "10", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bf4190f-608f-49e4-a614-fc2e77c875bd", "record_id": "flaws_cloudtrail:0000135:5bf4190f-608f-49e4-a614-fc2e77c875bd", "row_index": 135, "timestamp": "2019-05-29T12:15:37Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bf4190f-608f-49e4-a614-fc2e77c875bd", "eventTime": "2019-05-29T12:15:37Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: HmSa_lJyeJvgcaUDnxs-n3jDjKLYYHoWopJngFk5SvRAVjQe9V9NLbbQtQtjYoNEb9LuUcA9RXPlH5gNiDn1WYVCqkjfQdy_X9ZVrw0HqlJw03H8VNgGNWhsSJ7Iiu2Wug59vSwURL3IQuNiY5lRcjO22DFi4kceitfQnNirL_iGcDmONSMYcF2Vj359ZkR0QCfONP5YIyl47j2A7mWfwuFsowyCsePL_mXVRrcKj81QpiAtdh36BQbvEfuc1hwxeFghx6wKLNindPZfHCNES9-5dgR8Y1ITvRPe2Rc5waI8zg4LsmMAPufKzZKacXxAdLYDDmfOEC9Fk3zzfSmeX4w5knGSRuulTQ587JtsEcA3OHJonC6gsuuYt-r_QoBV6D9xSft3cwgUnLk2vJHDqMwRkeuc3X5I4gYDQzGvBS2Vu-c99Sd4-y0767rVu5fJBhEP9ZLJ6wUAZAT-EBR7Degb1phDZt9DsWSBwPV5zpYv66-BkJFyGgCCKUM3_PQJ8JngaqU3Mid3vLiiqiKDu5bICgJjKAbRPUFzlPqHvlc1T22t20Ftb2SoJLJgrn1PLD_qlFPXoSiZR_8aRRaZD-5HVRrJ5zINvWNUWtMB77bDo3Aavlfj8bOz009napQa6C471mfKAic", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"size": "10", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bf4190f-608f-49e4-a614-fc2e77c875bd", "record_id": "flaws_cloudtrail:0000136:5bf4190f-608f-49e4-a614-fc2e77c875bd", "row_index": 136, "timestamp": "2019-05-29T12:15:37Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bf4190f-608f-49e4-a614-fc2e77c875bd", "eventTime": "2019-05-29T12:15:37Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: HmSa_lJyeJvgcaUDnxs-n3jDjKLYYHoWopJngFk5SvRAVjQe9V9NLbbQtQtjYoNEb9LuUcA9RXPlH5gNiDn1WYVCqkjfQdy_X9ZVrw0HqlJw03H8VNgGNWhsSJ7Iiu2Wug59vSwURL3IQuNiY5lRcjO22DFi4kceitfQnNirL_iGcDmONSMYcF2Vj359ZkR0QCfONP5YIyl47j2A7mWfwuFsowyCsePL_mXVRrcKj81QpiAtdh36BQbvEfuc1hwxeFghx6wKLNindPZfHCNES9-5dgR8Y1ITvRPe2Rc5waI8zg4LsmMAPufKzZKacXxAdLYDDmfOEC9Fk3zzfSmeX4w5knGSRuulTQ587JtsEcA3OHJonC6gsuuYt-r_QoBV6D9xSft3cwgUnLk2vJHDqMwRkeuc3X5I4gYDQzGvBS2Vu-c99Sd4-y0767rVu5fJBhEP9ZLJ6wUAZAT-EBR7Degb1phDZt9DsWSBwPV5zpYv66-BkJFyGgCCKUM3_PQJ8JngaqU3Mid3vLiiqiKDu5bICgJjKAbRPUFzlPqHvlc1T22t20Ftb2SoJLJgrn1PLD_qlFPXoSiZR_8aRRaZD-5HVRrJ5zINvWNUWtMB77bDo3Aavlfj8bOz009napQa6C471mfKAic", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"size": "10", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2a37e4c-c6f0-4591-b577-d636fd2a8078", "record_id": "flaws_cloudtrail:0000137:e2a37e4c-c6f0-4591-b577-d636fd2a8078", "row_index": 137, "timestamp": "2019-05-29T12:16:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2a37e4c-c6f0-4591-b577-d636fd2a8078", "eventTime": "2019-05-29T12:16:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2a37e4c-c6f0-4591-b577-d636fd2a8078", "record_id": "flaws_cloudtrail:0000138:e2a37e4c-c6f0-4591-b577-d636fd2a8078", "row_index": 138, "timestamp": "2019-05-29T12:16:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2a37e4c-c6f0-4591-b577-d636fd2a8078", "eventTime": "2019-05-29T12:16:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6880e2e3-2d86-47de-ac5c-fcce9d2a0a26", "record_id": "flaws_cloudtrail:0000139:6880e2e3-2d86-47de-ac5c-fcce9d2a0a26", "row_index": 139, "timestamp": "2019-05-29T12:20:34Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6880e2e3-2d86-47de-ac5c-fcce9d2a0a26", "eventTime": "2019-05-29T12:20:34Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6880e2e3-2d86-47de-ac5c-fcce9d2a0a26", "record_id": "flaws_cloudtrail:0000140:6880e2e3-2d86-47de-ac5c-fcce9d2a0a26", "row_index": 140, "timestamp": "2019-05-29T12:20:34Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6880e2e3-2d86-47de-ac5c-fcce9d2a0a26", "eventTime": "2019-05-29T12:20:34Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7c27e1e-852b-44b2-a4a9-fb513487da", "record_id": "flaws_cloudtrail:0000141:e7c27e1e-852b-44b2-a4a9-fb513487da", "row_index": 141, "timestamp": "2019-05-29T12:20:35Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7c27e1e-852b-44b2-a4a9-fb513487da", "eventTime": "2019-05-29T12:20:35Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d969b51-81ce-46e2-804a-e205b8015e2c", "record_id": "flaws_cloudtrail:0000142:3d969b51-81ce-46e2-804a-e205b8015e2c", "row_index": 142, "timestamp": "2019-05-29T12:20:35Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d969b51-81ce-46e2-804a-e205b8015e2c", "eventTime": "2019-05-29T12:20:35Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7c27e1e-852b-44b2-a4a9-fb513487da", "record_id": "flaws_cloudtrail:0000143:e7c27e1e-852b-44b2-a4a9-fb513487da", "row_index": 143, "timestamp": "2019-05-29T12:20:35Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7c27e1e-852b-44b2-a4a9-fb513487da", "eventTime": "2019-05-29T12:20:35Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d969b51-81ce-46e2-804a-e205b8015e2c", "record_id": "flaws_cloudtrail:0000144:3d969b51-81ce-46e2-804a-e205b8015e2c", "row_index": 144, "timestamp": "2019-05-29T12:20:35Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d969b51-81ce-46e2-804a-e205b8015e2c", "eventTime": "2019-05-29T12:20:35Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74a182e4-40af-4e19-8621-f381d4aab1df", "record_id": "flaws_cloudtrail:0000145:74a182e4-40af-4e19-8621-f381d4aab1df", "row_index": 145, "timestamp": "2019-05-29T12:20:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74a182e4-40af-4e19-8621-f381d4aab1df", "eventTime": "2019-05-29T12:20:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7efa30b-1da5-4276-9939-8038c85176", "record_id": "flaws_cloudtrail:0000146:f7efa30b-1da5-4276-9939-8038c85176", "row_index": 146, "timestamp": "2019-05-29T12:20:36Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7efa30b-1da5-4276-9939-8038c85176", "eventTime": "2019-05-29T12:20:36Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1403cdb6-5adf-4801-b492-02531a9eab7", "record_id": "flaws_cloudtrail:0000147:1403cdb6-5adf-4801-b492-02531a9eab7", "row_index": 147, "timestamp": "2019-05-29T12:20:36Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1403cdb6-5adf-4801-b492-02531a9eab7", "eventTime": "2019-05-29T12:20:36Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74a182e4-40af-4e19-8621-f381d4aab1df", "record_id": "flaws_cloudtrail:0000148:74a182e4-40af-4e19-8621-f381d4aab1df", "row_index": 148, "timestamp": "2019-05-29T12:20:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74a182e4-40af-4e19-8621-f381d4aab1df", "eventTime": "2019-05-29T12:20:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7efa30b-1da5-4276-9939-8038c85176", "record_id": "flaws_cloudtrail:0000149:f7efa30b-1da5-4276-9939-8038c85176", "row_index": 149, "timestamp": "2019-05-29T12:20:36Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7efa30b-1da5-4276-9939-8038c85176", "eventTime": "2019-05-29T12:20:36Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1403cdb6-5adf-4801-b492-02531a9eab7", "record_id": "flaws_cloudtrail:0000150:1403cdb6-5adf-4801-b492-02531a9eab7", "row_index": 150, "timestamp": "2019-05-29T12:20:36Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1403cdb6-5adf-4801-b492-02531a9eab7", "eventTime": "2019-05-29T12:20:36Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a4e1ffb-f668-4d27-92bf-a0361cd54fe9", "record_id": "flaws_cloudtrail:0000151:4a4e1ffb-f668-4d27-92bf-a0361cd54fe9", "row_index": 151, "timestamp": "2019-05-29T12:20:37Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a4e1ffb-f668-4d27-92bf-a0361cd54fe9", "eventTime": "2019-05-29T12:20:37Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a733322a8-6aa2-481b-9f84-c22ff9228a7e", "record_id": "flaws_cloudtrail:0000152:a733322a8-6aa2-481b-9f84-c22ff9228a7e", "row_index": 152, "timestamp": "2019-05-29T12:20:37Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a733322a8-6aa2-481b-9f84-c22ff9228a7e", "eventTime": "2019-05-29T12:20:37Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "142d1ae3-9b25-436e-ba73-2ead4e0315ce", "record_id": "flaws_cloudtrail:0000153:142d1ae3-9b25-436e-ba73-2ead4e0315ce", "row_index": 153, "timestamp": "2019-05-29T12:20:37Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "142d1ae3-9b25-436e-ba73-2ead4e0315ce", "eventTime": "2019-05-29T12:20:37Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a4e1ffb-f668-4d27-92bf-a0361cd54fe9", "record_id": "flaws_cloudtrail:0000154:4a4e1ffb-f668-4d27-92bf-a0361cd54fe9", "row_index": 154, "timestamp": "2019-05-29T12:20:37Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a4e1ffb-f668-4d27-92bf-a0361cd54fe9", "eventTime": "2019-05-29T12:20:37Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a733322a8-6aa2-481b-9f84-c22ff9228a7e", "record_id": "flaws_cloudtrail:0000155:a733322a8-6aa2-481b-9f84-c22ff9228a7e", "row_index": 155, "timestamp": "2019-05-29T12:20:37Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a733322a8-6aa2-481b-9f84-c22ff9228a7e", "eventTime": "2019-05-29T12:20:37Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "142d1ae3-9b25-436e-ba73-2ead4e0315ce", "record_id": "flaws_cloudtrail:0000156:142d1ae3-9b25-436e-ba73-2ead4e0315ce", "row_index": 156, "timestamp": "2019-05-29T12:20:37Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "142d1ae3-9b25-436e-ba73-2ead4e0315ce", "eventTime": "2019-05-29T12:20:37Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1553b833-4ed3-4381-b854-aa1f0d9a2936", "record_id": "flaws_cloudtrail:0000157:1553b833-4ed3-4381-b854-aa1f0d9a2936", "row_index": 157, "timestamp": "2019-05-29T12:23:41Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1553b833-4ed3-4381-b854-aa1f0d9a2936", "eventTime": "2019-05-29T12:23:41Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 45ucZ_B506y8LDXQTtfy7jq15USdRf_dDlffr8Ugbjr9K_cEvt5gvUAydApr7NJDkNOWspVuriNJW0YBfpRwNNsT-wwYiKiZYTtzwTvrCdWTMDAJ-qevVLHYsgeCKNASS13U5MF-7-zBtZG-6PnlC1F-wvbX4Lx5mlpcT5JlYiOM3qYi-xtYECIzEFutkIwV2npsPvFoSPa-5Hy1Zqv0UrfQ8P1QaoXAO_7IvFOhq6kB6R71A30BywHat7xnnhBFqvP06z2115XZSNllFNSQRbivNZLz6WtYhtNVmxpLE2OYaOkOGSLbNUpSCf6C7xMM8zZmeEviFS1r7ECeeeE2rJl1LM1vcg-v1_-4KU0BsjvFF9msU6370oNsd595hnVOaknLhRLCycBhPwulajsaPA9f3WjTtacs1jzSjVg3WZpgYWaySOa6AEq15dbVLXWWHveq6tstsjDXl1b_CVsb8OchIGyJEcZKylr5k1Ok5iYDVdqpY_dHNIDf3_6NWgsHKQZZ4cv3QSF8y706uOKk9u9nDNhRt1ftWfZvV7Ma2RBEXZwR7LAuhI9NuozDDiVNl8nm2R5j1LjaAnpnLKXEVsH0_7VnGXH1WpyHIu8VzwruhU5yYRkMBtNoO7NL7ibfmbgF6_rQkQw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"size": "10", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1553b833-4ed3-4381-b854-aa1f0d9a2936", "record_id": "flaws_cloudtrail:0000158:1553b833-4ed3-4381-b854-aa1f0d9a2936", "row_index": 158, "timestamp": "2019-05-29T12:23:41Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1553b833-4ed3-4381-b854-aa1f0d9a2936", "eventTime": "2019-05-29T12:23:41Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 45ucZ_B506y8LDXQTtfy7jq15USdRf_dDlffr8Ugbjr9K_cEvt5gvUAydApr7NJDkNOWspVuriNJW0YBfpRwNNsT-wwYiKiZYTtzwTvrCdWTMDAJ-qevVLHYsgeCKNASS13U5MF-7-zBtZG-6PnlC1F-wvbX4Lx5mlpcT5JlYiOM3qYi-xtYECIzEFutkIwV2npsPvFoSPa-5Hy1Zqv0UrfQ8P1QaoXAO_7IvFOhq6kB6R71A30BywHat7xnnhBFqvP06z2115XZSNllFNSQRbivNZLz6WtYhtNVmxpLE2OYaOkOGSLbNUpSCf6C7xMM8zZmeEviFS1r7ECeeeE2rJl1LM1vcg-v1_-4KU0BsjvFF9msU6370oNsd595hnVOaknLhRLCycBhPwulajsaPA9f3WjTtacs1jzSjVg3WZpgYWaySOa6AEq15dbVLXWWHveq6tstsjDXl1b_CVsb8OchIGyJEcZKylr5k1Ok5iYDVdqpY_dHNIDf3_6NWgsHKQZZ4cv3QSF8y706uOKk9u9nDNhRt1ftWfZvV7Ma2RBEXZwR7LAuhI9NuozDDiVNl8nm2R5j1LjaAnpnLKXEVsH0_7VnGXH1WpyHIu8VzwruhU5yYRkMBtNoO7NL7ibfmbgF6_rQkQw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"size": "10", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f580051f-acbb-4227-a594-95c0b080444f5", "record_id": "flaws_cloudtrail:0000159:2f580051f-acbb-4227-a594-95c0b080444f5", "row_index": 159, "timestamp": "2019-05-29T12:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1872, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f580051f-acbb-4227-a594-95c0b080444f5", "eventTime": "2019-05-29T12:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO1GNBYJ6VQYJVAR1", "expiration": "May 29, 2019 6:24:50 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f580051f-acbb-4227-a594-95c0b080444f5", "record_id": "flaws_cloudtrail:0000160:2f580051f-acbb-4227-a594-95c0b080444f5", "row_index": 160, "timestamp": "2019-05-29T12:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1872, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f580051f-acbb-4227-a594-95c0b080444f5", "eventTime": "2019-05-29T12:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO1GNBYJ6VQYJVAR1", "expiration": "May 29, 2019 6:24:50 PM", "sessionToken": "AgoJb3JpZ2luX2VjEEUaCXVzLXdlc3QtMiJHMEUCIQD3goxUef2qbSyo6/NczSmkOTnNIBe9WTdcoQDgKrHP2AIgedFkr70cg6NqJERf23cLYxh64NbxFvhTT7guQDOdzcIq2gMIXhAAGgw5NzU0MjYyNjIwMjkiDFAQHiW2WV6mP0u93iq3A8wyom2yVEqfUTniwnESroAAdA0dHKKFfwTMfAT1QAU2sFFx1e7e+BtOC2S01F9+SixafZfpq3CuI3wazCa6XverrLV1ibg/BOdd4dfTcWmix/PUvi05SnMqqxCIZZ5D+/OW1LnQgGm7Tt/yxLIRX779xgZR9WxAa7N/uh1med17BS7LnmquSZOrGS62wjyTbVdNypNWDygD9URNd2KkkFqcOd3vpIzndlNWsSZu2rY9t0I4udvKKR3tgFU/x1ASLkBR5H8utRGHmfrCziQIS/4UAcErtoR0bKHIRBnmxBlPO5AnWQgmfrYhoIuvB4kzmcPUFkNDpE3Ynd/j9NUwflx1D9iDFmpztRVLGhIJa9qfrgnptiOOf2Xbp/UgQOx2ecge+63cCjuFAWQA3EtmKrScDLLMfaVvg6swSHtxm+9Shg4MBdSGTsbw/G5zodxFJ44SRwsNKPXqSHQN0qQ5jVKURB0oKUe3bzgJMc5Rhwf1kZO7L29+neFJ93RY0psdErkyzou8TIZipvRGWZQo05D0GVL2XdLmBmXAXsYdM0Y4Eka3fPpAVHmicvH0L5ykoEACluJxPHMwgfS55wU6tAHkLOW/ZsEj5G8urHpJeYKarvibsJVg42ybvGYTs+Zr3+T2cDjlrHW2exVtmUcIm3TEXHSs3THCeDVJ0qrf3/m68AvWKgzR0ZyemLB+2pgxaTXM7gY9yN3r6YpcbPU9j/CWq34Jdal9NG1KRbrJt6HSfcsrANmjejpy+6GXC+iD4F0MZKDCbxrtQeQK9ciYEedM4juLUhOOaaBFVuOZPySyIUkpqWYI723BgAZdoaehteqh7L8="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "953f4c9f-99c6-43c2-8cf0-d83bbebe9258", "record_id": "flaws_cloudtrail:0000161:953f4c9f-99c6-43c2-8cf0-d83bbebe9258", "row_index": 161, "timestamp": "2019-05-29T12:24:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "953f4c9f-99c6-43c2-8cf0-d83bbebe9258", "eventTime": "2019-05-29T12:24:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMO31FWCEWIDWHHOL", "expiration": "May 29, 2019 1:24:50 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "953f4c9f-99c6-43c2-8cf0-d83bbebe9258", "record_id": "flaws_cloudtrail:0000162:953f4c9f-99c6-43c2-8cf0-d83bbebe9258", "row_index": 162, "timestamp": "2019-05-29T12:24:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "953f4c9f-99c6-43c2-8cf0-d83bbebe9258", "eventTime": "2019-05-29T12:24:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMO31FWCEWIDWHHOL", "expiration": "May 29, 2019 1:24:50 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5d457392-8c46-41ee-885e-cac3cca2a64b", "record_id": "flaws_cloudtrail:0000163:e5d457392-8c46-41ee-885e-cac3cca2a64b", "row_index": 163, "timestamp": "2019-05-29T12:27:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5d457392-8c46-41ee-885e-cac3cca2a64b", "eventTime": "2019-05-29T12:27:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances on resource: arn:aws:rds:us-west-2:811596193553:db:testname", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5d457392-8c46-41ee-885e-cac3cca2a64b", "record_id": "flaws_cloudtrail:0000164:e5d457392-8c46-41ee-885e-cac3cca2a64b", "row_index": 164, "timestamp": "2019-05-29T12:27:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5d457392-8c46-41ee-885e-cac3cca2a64b", "eventTime": "2019-05-29T12:27:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances on resource: arn:aws:rds:us-west-2:811596193553:db:testname", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8a3fe28-4b96-41dd-bf15-6be45b2a8700", "record_id": "flaws_cloudtrail:0000165:a8a3fe28-4b96-41dd-bf15-6be45b2a8700", "row_index": 165, "timestamp": "2019-05-29T12:28:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8a3fe28-4b96-41dd-bf15-6be45b2a8700", "eventTime": "2019-05-29T12:28:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8a3fe28-4b96-41dd-bf15-6be45b2a8700", "record_id": "flaws_cloudtrail:0000166:a8a3fe28-4b96-41dd-bf15-6be45b2a8700", "row_index": 166, "timestamp": "2019-05-29T12:28:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8a3fe28-4b96-41dd-bf15-6be45b2a8700", "eventTime": "2019-05-29T12:28:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5efab6d8-5c38-417d-a2af-aa063c6c88ea", "record_id": "flaws_cloudtrail:0000167:5efab6d8-5c38-417d-a2af-aa063c6c88ea", "row_index": 167, "timestamp": "2019-05-29T12:29:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5efab6d8-5c38-417d-a2af-aa063c6c88ea", "eventTime": "2019-05-29T12:29:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5efab6d8-5c38-417d-a2af-aa063c6c88ea", "record_id": "flaws_cloudtrail:0000168:5efab6d8-5c38-417d-a2af-aa063c6c88ea", "row_index": 168, "timestamp": "2019-05-29T12:29:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5efab6d8-5c38-417d-a2af-aa063c6c88ea", "eventTime": "2019-05-29T12:29:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e0bfae8-26f4-4675-a1d5-b7c604802a69e", "record_id": "flaws_cloudtrail:0000169:6e0bfae8-26f4-4675-a1d5-b7c604802a69e", "row_index": 169, "timestamp": "2019-05-29T12:29:46Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1330, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e0bfae8-26f4-4675-a1d5-b7c604802a69e", "eventTime": "2019-05-29T12:29:46Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F86419%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=86419T75238Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=28cca58d705540a7729fd0ac56956f9b4cb1e6a50b83b2b98f7b93acdf40df64"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e0bfae8-26f4-4675-a1d5-b7c604802a69e", "record_id": "flaws_cloudtrail:0000170:6e0bfae8-26f4-4675-a1d5-b7c604802a69e", "row_index": 170, "timestamp": "2019-05-29T12:29:46Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1330, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e0bfae8-26f4-4675-a1d5-b7c604802a69e", "eventTime": "2019-05-29T12:29:46Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F86419%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=86419T75238Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=28cca58d705540a7729fd0ac56956f9b4cb1e6a50b83b2b98f7b93acdf40df64"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1faa891-1efc-4e99-aebb-3b0a822827b6", "record_id": "flaws_cloudtrail:0000171:d1faa891-1efc-4e99-aebb-3b0a822827b6", "row_index": 171, "timestamp": "2019-05-29T12:33:01Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1faa891-1efc-4e99-aebb-3b0a822827b6", "eventTime": "2019-05-29T12:33:01Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1faa891-1efc-4e99-aebb-3b0a822827b6", "record_id": "flaws_cloudtrail:0000172:d1faa891-1efc-4e99-aebb-3b0a822827b6", "row_index": 172, "timestamp": "2019-05-29T12:33:01Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1faa891-1efc-4e99-aebb-3b0a822827b6", "eventTime": "2019-05-29T12:33:01Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26b008003-a688-4f56-815f-b5c3b578f203", "record_id": "flaws_cloudtrail:0000173:26b008003-a688-4f56-815f-b5c3b578f203", "row_index": 173, "timestamp": "2019-05-29T12:52:45Z", "event_type": "CreateSnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26b008003-a688-4f56-815f-b5c3b578f203", "eventTime": "2019-05-29T12:52:45Z", "eventName": "CreateSnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeId": "vol-8e100f305b7a6fef3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26b008003-a688-4f56-815f-b5c3b578f203", "record_id": "flaws_cloudtrail:0000174:26b008003-a688-4f56-815f-b5c3b578f203", "row_index": 174, "timestamp": "2019-05-29T12:52:45Z", "event_type": "CreateSnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26b008003-a688-4f56-815f-b5c3b578f203", "eventTime": "2019-05-29T12:52:45Z", "eventName": "CreateSnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeId": "vol-8e100f305b7a6fef3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a921342f-adf4-41dd-96c1-04ef22065", "record_id": "flaws_cloudtrail:0000175:8a921342f-adf4-41dd-96c1-04ef22065", "row_index": 175, "timestamp": "2019-05-29T12:53:35Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a921342f-adf4-41dd-96c1-04ef22065", "eventTime": "2019-05-29T12:53:35Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a921342f-adf4-41dd-96c1-04ef22065", "record_id": "flaws_cloudtrail:0000176:8a921342f-adf4-41dd-96c1-04ef22065", "row_index": 176, "timestamp": "2019-05-29T12:53:35Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a921342f-adf4-41dd-96c1-04ef22065", "eventTime": "2019-05-29T12:53:35Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c9a05ad-f386-4348-8a52-35eabf797c23", "record_id": "flaws_cloudtrail:0000177:9c9a05ad-f386-4348-8a52-35eabf797c23", "row_index": 177, "timestamp": "2019-05-29T12:53:36Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c9a05ad-f386-4348-8a52-35eabf797c23", "eventTime": "2019-05-29T12:53:36Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c9a05ad-f386-4348-8a52-35eabf797c23", "record_id": "flaws_cloudtrail:0000178:9c9a05ad-f386-4348-8a52-35eabf797c23", "row_index": 178, "timestamp": "2019-05-29T12:53:36Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c9a05ad-f386-4348-8a52-35eabf797c23", "eventTime": "2019-05-29T12:53:36Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34cb5dea-33e4-4f44-9fa5-94cc1c4f9a1e", "record_id": "flaws_cloudtrail:0000179:34cb5dea-33e4-4f44-9fa5-94cc1c4f9a1e", "row_index": 179, "timestamp": "2019-05-29T12:53:43Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34cb5dea-33e4-4f44-9fa5-94cc1c4f9a1e", "eventTime": "2019-05-29T12:53:43Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33f5c5cc-1541-493a-8c9e-e043ee6fb4ec", "record_id": "flaws_cloudtrail:0000180:33f5c5cc-1541-493a-8c9e-e043ee6fb4ec", "row_index": 180, "timestamp": "2019-05-29T12:53:43Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33f5c5cc-1541-493a-8c9e-e043ee6fb4ec", "eventTime": "2019-05-29T12:53:43Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAttachedUserPolicies on resource: role backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92afdc24-9093-4b05-96d2-6f37038e956", "record_id": "flaws_cloudtrail:0000181:92afdc24-9093-4b05-96d2-6f37038e956", "row_index": 181, "timestamp": "2019-05-29T12:53:43Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92afdc24-9093-4b05-96d2-6f37038e956", "eventTime": "2019-05-29T12:53:43Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroupsForUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34cb5dea-33e4-4f44-9fa5-94cc1c4f9a1e", "record_id": "flaws_cloudtrail:0000182:34cb5dea-33e4-4f44-9fa5-94cc1c4f9a1e", "row_index": 182, "timestamp": "2019-05-29T12:53:43Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34cb5dea-33e4-4f44-9fa5-94cc1c4f9a1e", "eventTime": "2019-05-29T12:53:43Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33f5c5cc-1541-493a-8c9e-e043ee6fb4ec", "record_id": "flaws_cloudtrail:0000183:33f5c5cc-1541-493a-8c9e-e043ee6fb4ec", "row_index": 183, "timestamp": "2019-05-29T12:53:43Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33f5c5cc-1541-493a-8c9e-e043ee6fb4ec", "eventTime": "2019-05-29T12:53:43Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAttachedUserPolicies on resource: role backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92afdc24-9093-4b05-96d2-6f37038e956", "record_id": "flaws_cloudtrail:0000184:92afdc24-9093-4b05-96d2-6f37038e956", "row_index": 184, "timestamp": "2019-05-29T12:53:43Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92afdc24-9093-4b05-96d2-6f37038e956", "eventTime": "2019-05-29T12:53:43Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroupsForUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ab519371-5806-4908-9b1e-0142f8b47834", "record_id": "flaws_cloudtrail:0000185:1ab519371-5806-4908-9b1e-0142f8b47834", "row_index": 185, "timestamp": "2019-05-29T12:54:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ab519371-5806-4908-9b1e-0142f8b47834", "eventTime": "2019-05-29T12:54:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ab519371-5806-4908-9b1e-0142f8b47834", "record_id": "flaws_cloudtrail:0000186:1ab519371-5806-4908-9b1e-0142f8b47834", "row_index": 186, "timestamp": "2019-05-29T12:54:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ab519371-5806-4908-9b1e-0142f8b47834", "eventTime": "2019-05-29T12:54:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc2a600c-7848-47c9-904f-dc9633deb4fd", "record_id": "flaws_cloudtrail:0000187:fc2a600c-7848-47c9-904f-dc9633deb4fd", "row_index": 187, "timestamp": "2019-05-29T12:54:45Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc2a600c-7848-47c9-904f-dc9633deb4fd", "eventTime": "2019-05-29T12:54:45Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc2a600c-7848-47c9-904f-dc9633deb4fd", "record_id": "flaws_cloudtrail:0000188:fc2a600c-7848-47c9-904f-dc9633deb4fd", "row_index": 188, "timestamp": "2019-05-29T12:54:45Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc2a600c-7848-47c9-904f-dc9633deb4fd", "eventTime": "2019-05-29T12:54:45Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "039ec49c-6ccb-4f18-ad6d-3a5c444f8162", "record_id": "flaws_cloudtrail:0000189:039ec49c-6ccb-4f18-ad6d-3a5c444f8162", "row_index": 189, "timestamp": "2019-05-29T12:54:48Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "039ec49c-6ccb-4f18-ad6d-3a5c444f8162", "eventTime": "2019-05-29T12:54:48Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroupsForUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e38af40-abb2-495d-8ab9-d220d8c0ff1e", "record_id": "flaws_cloudtrail:0000190:7e38af40-abb2-495d-8ab9-d220d8c0ff1e", "row_index": 190, "timestamp": "2019-05-29T12:54:48Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e38af40-abb2-495d-8ab9-d220d8c0ff1e", "eventTime": "2019-05-29T12:54:48Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAttachedUserPolicies on resource: role backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9ecbc17-5b6d-4ec9-a047-73af9df80d88", "record_id": "flaws_cloudtrail:0000191:c9ecbc17-5b6d-4ec9-a047-73af9df80d88", "row_index": 191, "timestamp": "2019-05-29T12:54:48Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9ecbc17-5b6d-4ec9-a047-73af9df80d88", "eventTime": "2019-05-29T12:54:48Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "039ec49c-6ccb-4f18-ad6d-3a5c444f8162", "record_id": "flaws_cloudtrail:0000192:039ec49c-6ccb-4f18-ad6d-3a5c444f8162", "row_index": 192, "timestamp": "2019-05-29T12:54:48Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "039ec49c-6ccb-4f18-ad6d-3a5c444f8162", "eventTime": "2019-05-29T12:54:48Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroupsForUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e38af40-abb2-495d-8ab9-d220d8c0ff1e", "record_id": "flaws_cloudtrail:0000193:7e38af40-abb2-495d-8ab9-d220d8c0ff1e", "row_index": 193, "timestamp": "2019-05-29T12:54:48Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e38af40-abb2-495d-8ab9-d220d8c0ff1e", "eventTime": "2019-05-29T12:54:48Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAttachedUserPolicies on resource: role backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9ecbc17-5b6d-4ec9-a047-73af9df80d88", "record_id": "flaws_cloudtrail:0000194:c9ecbc17-5b6d-4ec9-a047-73af9df80d88", "row_index": 194, "timestamp": "2019-05-29T12:54:48Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9ecbc17-5b6d-4ec9-a047-73af9df80d88", "eventTime": "2019-05-29T12:54:48Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7c71c82-6315-47af-b53a-61ac141b49ae", "record_id": "flaws_cloudtrail:0000195:c7c71c82-6315-47af-b53a-61ac141b49ae", "row_index": 195, "timestamp": "2019-05-29T12:54:56Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7c71c82-6315-47af-b53a-61ac141b49ae", "eventTime": "2019-05-29T12:54:56Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListInstanceProfiles on resource: arn:aws:iam::811596193553:instance-profile/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7c71c82-6315-47af-b53a-61ac141b49ae", "record_id": "flaws_cloudtrail:0000196:c7c71c82-6315-47af-b53a-61ac141b49ae", "row_index": 196, "timestamp": "2019-05-29T12:54:56Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7c71c82-6315-47af-b53a-61ac141b49ae", "eventTime": "2019-05-29T12:54:56Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListInstanceProfiles on resource: arn:aws:iam::811596193553:instance-profile/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f332f337-6f7d-4301-ac58-8c84e56db0ba", "record_id": "flaws_cloudtrail:0000197:f332f337-6f7d-4301-ac58-8c84e56db0ba", "row_index": 197, "timestamp": "2019-05-29T12:55:45Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f332f337-6f7d-4301-ac58-8c84e56db0ba", "eventTime": "2019-05-29T12:55:45Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: JzZwhqxaizKo84pBnRQZ3UmA8XUx1MPGANCf_nIlX5obN2If00p5nrjJ4xI3FLkFtGaOXERzLW6Pkt_ycmD2wS8JOjuhirRhPYbLbYiQwtbZR56HF5HSepsg7-FRX6GmCCrE4eBRaFb57JLE2zc0ItlO0bu7sAs1hpVwc761lJuk60uxv3tFOH9PmWkhQ7kRNHalZGoEA0qZW5XTmFCIEXVcf6A_tFWAjzD8UjzApNIJCmM4T5HcRzr05oDM9nU_nzdipnazhALKLi-QeLXRd7_jZanJOnNrzE3Pz4H45p0wfH2EYyMCBV-0vWITQrvYLyUzi5NoN0SoCVXEqeLu8gw3J785grcvuJYMt9ISTXAOAmIhvJoxwB3-YtzZpTGp20K3pJOJ2Z1OCsNcLasPE8FAC6DkJIq1oPA1MojfSh8-9ZU_61Yl7Fpo7pf-sbbaI-PFrT2aQF-XLdWmeANfZKji7fncqOBfR34ieIneVrhiBa9u9xA_iOdcuSmKwZT2uXNCplx6YhiEk7xhH1d80wbrqTs-DgvckRBOzIWZhJHJEeGQ6PdfCYrZIka18HEF3rJQc_zObZUjone4B5zzyarVvDvf_E4Ap9fW4a-G55UieUvg1r2-YU5zT2m6b0w51Yd-ubRhKA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"size": "100", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f332f337-6f7d-4301-ac58-8c84e56db0ba", "record_id": "flaws_cloudtrail:0000198:f332f337-6f7d-4301-ac58-8c84e56db0ba", "row_index": 198, "timestamp": "2019-05-29T12:55:45Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f332f337-6f7d-4301-ac58-8c84e56db0ba", "eventTime": "2019-05-29T12:55:45Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: JzZwhqxaizKo84pBnRQZ3UmA8XUx1MPGANCf_nIlX5obN2If00p5nrjJ4xI3FLkFtGaOXERzLW6Pkt_ycmD2wS8JOjuhirRhPYbLbYiQwtbZR56HF5HSepsg7-FRX6GmCCrE4eBRaFb57JLE2zc0ItlO0bu7sAs1hpVwc761lJuk60uxv3tFOH9PmWkhQ7kRNHalZGoEA0qZW5XTmFCIEXVcf6A_tFWAjzD8UjzApNIJCmM4T5HcRzr05oDM9nU_nzdipnazhALKLi-QeLXRd7_jZanJOnNrzE3Pz4H45p0wfH2EYyMCBV-0vWITQrvYLyUzi5NoN0SoCVXEqeLu8gw3J785grcvuJYMt9ISTXAOAmIhvJoxwB3-YtzZpTGp20K3pJOJ2Z1OCsNcLasPE8FAC6DkJIq1oPA1MojfSh8-9ZU_61Yl7Fpo7pf-sbbaI-PFrT2aQF-XLdWmeANfZKji7fncqOBfR34ieIneVrhiBa9u9xA_iOdcuSmKwZT2uXNCplx6YhiEk7xhH1d80wbrqTs-DgvckRBOzIWZhJHJEeGQ6PdfCYrZIka18HEF3rJQc_zObZUjone4B5zzyarVvDvf_E4Ap9fW4a-G55UieUvg1r2-YU5zT2m6b0w51Yd-ubRhKA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"size": "100", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8facdae-4772-4021-9832-ba3d8d07a84d", "record_id": "flaws_cloudtrail:0000199:b8facdae-4772-4021-9832-ba3d8d07a84d", "row_index": 199, "timestamp": "2019-05-29T12:56:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8facdae-4772-4021-9832-ba3d8d07a84d", "eventTime": "2019-05-29T12:56:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8facdae-4772-4021-9832-ba3d8d07a84d", "record_id": "flaws_cloudtrail:0000200:b8facdae-4772-4021-9832-ba3d8d07a84d", "row_index": 200, "timestamp": "2019-05-29T12:56:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8facdae-4772-4021-9832-ba3d8d07a84d", "eventTime": "2019-05-29T12:56:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5b6df6b-fa00-4473-bb7d-3877725e4260", "record_id": "flaws_cloudtrail:0000201:b5b6df6b-fa00-4473-bb7d-3877725e4260", "row_index": 201, "timestamp": "2019-05-29T13:01:43Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5b6df6b-fa00-4473-bb7d-3877725e4260", "eventTime": "2019-05-29T13:01:43Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5b6df6b-fa00-4473-bb7d-3877725e4260", "record_id": "flaws_cloudtrail:0000202:b5b6df6b-fa00-4473-bb7d-3877725e4260", "row_index": 202, "timestamp": "2019-05-29T13:01:43Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5b6df6b-fa00-4473-bb7d-3877725e4260", "eventTime": "2019-05-29T13:01:43Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1d4ad8c-7d55-44e5-93dd-b5d75009cb21", "record_id": "flaws_cloudtrail:0000203:d1d4ad8c-7d55-44e5-93dd-b5d75009cb21", "row_index": 203, "timestamp": "2019-05-29T13:05:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1d4ad8c-7d55-44e5-93dd-b5d75009cb21", "eventTime": "2019-05-29T13:05:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1d4ad8c-7d55-44e5-93dd-b5d75009cb21", "record_id": "flaws_cloudtrail:0000204:d1d4ad8c-7d55-44e5-93dd-b5d75009cb21", "row_index": 204, "timestamp": "2019-05-29T13:05:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1d4ad8c-7d55-44e5-93dd-b5d75009cb21", "eventTime": "2019-05-29T13:05:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.166 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.156", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd3f720a-3732-4f6a-ab07-1ec33f316e24", "record_id": "flaws_cloudtrail:0000205:cd3f720a-3732-4f6a-ab07-1ec33f316e24", "row_index": 205, "timestamp": "2019-05-29T13:16:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd3f720a-3732-4f6a-ab07-1ec33f316e24", "eventTime": "2019-05-29T13:16:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd3f720a-3732-4f6a-ab07-1ec33f316e24", "record_id": "flaws_cloudtrail:0000206:cd3f720a-3732-4f6a-ab07-1ec33f316e24", "row_index": 206, "timestamp": "2019-05-29T13:16:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd3f720a-3732-4f6a-ab07-1ec33f316e24", "eventTime": "2019-05-29T13:16:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6f746b5-0130-4c24-9ca6-a23d6e036459c", "record_id": "flaws_cloudtrail:0000207:f6f746b5-0130-4c24-9ca6-a23d6e036459c", "row_index": 207, "timestamp": "2019-05-29T13:24:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1868, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6f746b5-0130-4c24-9ca6-a23d6e036459c", "eventTime": "2019-05-29T13:24:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6X5ZR95QXZ44ZA64", "expiration": "May 29, 2019 7:42:57 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6f746b5-0130-4c24-9ca6-a23d6e036459c", "record_id": "flaws_cloudtrail:0000208:f6f746b5-0130-4c24-9ca6-a23d6e036459c", "row_index": 208, "timestamp": "2019-05-29T13:24:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1868, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6f746b5-0130-4c24-9ca6-a23d6e036459c", "eventTime": "2019-05-29T13:24:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6X5ZR95QXZ44ZA64", "expiration": "May 29, 2019 7:42:57 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92a1ae82-def7-41ae-8c93-fff988e90251", "record_id": "flaws_cloudtrail:0000209:92a1ae82-def7-41ae-8c93-fff988e90251", "row_index": 209, "timestamp": "2019-05-29T14:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92a1ae82-def7-41ae-8c93-fff988e90251", "eventTime": "2019-05-29T14:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIARBZ3HPJGLN58BLHX", "expiration": "May 29, 2019 8:29:16 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92a1ae82-def7-41ae-8c93-fff988e90251", "record_id": "flaws_cloudtrail:0000210:92a1ae82-def7-41ae-8c93-fff988e90251", "row_index": 210, "timestamp": "2019-05-29T14:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92a1ae82-def7-41ae-8c93-fff988e90251", "eventTime": "2019-05-29T14:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIARBZ3HPJGLN58BLHX", "expiration": "May 29, 2019 8:29:16 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3435d636-eb78-4de6-bbd3-79f5035a9690", "record_id": "flaws_cloudtrail:0000211:3435d636-eb78-4de6-bbd3-79f5035a9690", "row_index": 211, "timestamp": "2019-05-29T14:27:41Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "[aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3435d636-eb78-4de6-bbd3-79f5035a9690", "eventTime": "2019-05-29T14:27:41Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "[aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3435d636-eb78-4de6-bbd3-79f5035a9690", "record_id": "flaws_cloudtrail:0000212:3435d636-eb78-4de6-bbd3-79f5035a9690", "row_index": 212, "timestamp": "2019-05-29T14:27:41Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "[aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3435d636-eb78-4de6-bbd3-79f5035a9690", "eventTime": "2019-05-29T14:27:41Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "[aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81d0f5f5-86af-4ab8-a44c-d9046261d490", "record_id": "flaws_cloudtrail:0000213:81d0f5f5-86af-4ab8-a44c-d9046261d490", "row_index": 213, "timestamp": "2019-05-29T14:30:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81d0f5f5-86af-4ab8-a44c-d9046261d490", "eventTime": "2019-05-29T14:30:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81d0f5f5-86af-4ab8-a44c-d9046261d490", "record_id": "flaws_cloudtrail:0000214:81d0f5f5-86af-4ab8-a44c-d9046261d490", "row_index": 214, "timestamp": "2019-05-29T14:30:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81d0f5f5-86af-4ab8-a44c-d9046261d490", "eventTime": "2019-05-29T14:30:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bf7b5c1-3adf-4336-b8cc-ccd86f4725d3", "record_id": "flaws_cloudtrail:0000215:2bf7b5c1-3adf-4336-b8cc-ccd86f4725d3", "row_index": 215, "timestamp": "2019-05-29T14:33:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bf7b5c1-3adf-4336-b8cc-ccd86f4725d3", "eventTime": "2019-05-29T14:33:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bf7b5c1-3adf-4336-b8cc-ccd86f4725d3", "record_id": "flaws_cloudtrail:0000216:2bf7b5c1-3adf-4336-b8cc-ccd86f4725d3", "row_index": 216, "timestamp": "2019-05-29T14:33:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bf7b5c1-3adf-4336-b8cc-ccd86f4725d3", "eventTime": "2019-05-29T14:33:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "008a6203-6821-4233-ae62-4aea90e5c880", "record_id": "flaws_cloudtrail:0000217:008a6203-6821-4233-ae62-4aea90e5c880", "row_index": 217, "timestamp": "2019-05-29T14:34:12Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "008a6203-6821-4233-ae62-4aea90e5c880", "eventTime": "2019-05-29T14:34:12Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "008a6203-6821-4233-ae62-4aea90e5c880", "record_id": "flaws_cloudtrail:0000218:008a6203-6821-4233-ae62-4aea90e5c880", "row_index": 218, "timestamp": "2019-05-29T14:34:12Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "008a6203-6821-4233-ae62-4aea90e5c880", "eventTime": "2019-05-29T14:34:12Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62c09995-8cf2-46a1-8b5d-6733610af38e", "record_id": "flaws_cloudtrail:0000219:62c09995-8cf2-46a1-8b5d-6733610af38e", "row_index": 219, "timestamp": "2019-05-29T14:34:57Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62c09995-8cf2-46a1-8b5d-6733610af38e", "eventTime": "2019-05-29T14:34:57Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62c09995-8cf2-46a1-8b5d-6733610af38e", "record_id": "flaws_cloudtrail:0000220:62c09995-8cf2-46a1-8b5d-6733610af38e", "row_index": 220, "timestamp": "2019-05-29T14:34:57Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62c09995-8cf2-46a1-8b5d-6733610af38e", "eventTime": "2019-05-29T14:34:57Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "340fbb9b-8c91-4578-861b-84b38c9e1818", "record_id": "flaws_cloudtrail:0000221:340fbb9b-8c91-4578-861b-84b38c9e1818", "row_index": 221, "timestamp": "2019-05-29T14:35:45Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "340fbb9b-8c91-4578-861b-84b38c9e1818", "eventTime": "2019-05-29T14:35:45Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "340fbb9b-8c91-4578-861b-84b38c9e1818", "record_id": "flaws_cloudtrail:0000222:340fbb9b-8c91-4578-861b-84b38c9e1818", "row_index": 222, "timestamp": "2019-05-29T14:35:45Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "340fbb9b-8c91-4578-861b-84b38c9e1818", "eventTime": "2019-05-29T14:35:45Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13ac90c1-076e-4145-8b9b-5fda27ac8f5b", "record_id": "flaws_cloudtrail:0000223:13ac90c1-076e-4145-8b9b-5fda27ac8f5b", "row_index": 223, "timestamp": "2019-05-29T14:36:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13ac90c1-076e-4145-8b9b-5fda27ac8f5b", "eventTime": "2019-05-29T14:36:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13ac90c1-076e-4145-8b9b-5fda27ac8f5b", "record_id": "flaws_cloudtrail:0000224:13ac90c1-076e-4145-8b9b-5fda27ac8f5b", "row_index": 224, "timestamp": "2019-05-29T14:36:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13ac90c1-076e-4145-8b9b-5fda27ac8f5b", "eventTime": "2019-05-29T14:36:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcbc268d-39c8-4558-ac9e-9407d5e9d128", "record_id": "flaws_cloudtrail:0000225:dcbc268d-39c8-4558-ac9e-9407d5e9d128", "row_index": 225, "timestamp": "2019-05-29T14:36:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcbc268d-39c8-4558-ac9e-9407d5e9d128", "eventTime": "2019-05-29T14:36:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcbc268d-39c8-4558-ac9e-9407d5e9d128", "record_id": "flaws_cloudtrail:0000226:dcbc268d-39c8-4558-ac9e-9407d5e9d128", "row_index": 226, "timestamp": "2019-05-29T14:36:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcbc268d-39c8-4558-ac9e-9407d5e9d128", "eventTime": "2019-05-29T14:36:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ca5ca48-5e18-4df2-b6d6-5b1a0af280a8", "record_id": "flaws_cloudtrail:0000227:9ca5ca48-5e18-4df2-b6d6-5b1a0af280a8", "row_index": 227, "timestamp": "2019-05-29T14:36:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ca5ca48-5e18-4df2-b6d6-5b1a0af280a8", "eventTime": "2019-05-29T14:36:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZS3NXZlZURWJoalJiMzM5cGNTNXQ5Y1pyTStUN204Q0tIaEUrQmVnYThqN0ZuRnVSdXdrb1ZHNUZqOENwUzhEL2Q2WkxIY3liNThMdkwrVWJ4V3FWMnpTbTlVRFdJYnhsUHU1RjBXL3RlRFZLdVpnejJ2aTZFWlZqQzR2ZnIwYUl1cWRqQVh5a0xRUlAyaWduRzV4Q1I2WDZqbHVPekt4b1RrL2ROSnBzdzIzVUl2YmMvRXFESGJIY2dwbmJJTEMvVU1zZjBZTDlpRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ca5ca48-5e18-4df2-b6d6-5b1a0af280a8", "record_id": "flaws_cloudtrail:0000228:9ca5ca48-5e18-4df2-b6d6-5b1a0af280a8", "row_index": 228, "timestamp": "2019-05-29T14:36:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ca5ca48-5e18-4df2-b6d6-5b1a0af280a8", "eventTime": "2019-05-29T14:36:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZS3NXZlZURWJoalJiMzM5cGNTNXQ5Y1pyTStUN204Q0tIaEUrQmVnYThqN0ZuRnVSdXdrb1ZHNUZqOENwUzhEL2Q2WkxIY3liNThMdkwrVWJ4V3FWMnpTbTlVRFdJYnhsUHU1RjBXL3RlRFZLdVpnejJ2aTZFWlZqQzR2ZnIwYUl1cWRqQVh5a0xRUlAyaWduRzV4Q1I2WDZqbHVPekt4b1RrL2ROSnBzdzIzVUl2YmMvRXFESGJIY2dwbmJJTEMvVU1zZjBZTDlpRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6de769237-af5b-4fa3-b837-8cfaef6a5756", "record_id": "flaws_cloudtrail:0000229:6de769237-af5b-4fa3-b837-8cfaef6a5756", "row_index": 229, "timestamp": "2019-05-29T14:36:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6de769237-af5b-4fa3-b837-8cfaef6a5756", "eventTime": "2019-05-29T14:36:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJclhxOEpIVzFDNHdnY3cxeE5YWTk4eGFEaDJVWWl3emVwUExVMWxqeG5TUFF3cTZVbVQwK2I4L3R5SDNkeGFaVVYrNTVwbmxpZ1dhcDd5Q3hLSHlVaW9hYTV0aFlBcS9YN0pHR25HVjhuQU9iUFR0STFYZlFxeWlQVjczenpaSFh0MzhNdFFKU2lkUHorTkhIZ3dVL1V6RTZ4eWx4bzY5aUF6Z2FIV09lbzlEU0p5ZTB0eVVGRjY3QmNWSlp4VVVuelBnUExCSjdPSHpQdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6de769237-af5b-4fa3-b837-8cfaef6a5756", "record_id": "flaws_cloudtrail:0000230:6de769237-af5b-4fa3-b837-8cfaef6a5756", "row_index": 230, "timestamp": "2019-05-29T14:36:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6de769237-af5b-4fa3-b837-8cfaef6a5756", "eventTime": "2019-05-29T14:36:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJclhxOEpIVzFDNHdnY3cxeE5YWTk4eGFEaDJVWWl3emVwUExVMWxqeG5TUFF3cTZVbVQwK2I4L3R5SDNkeGFaVVYrNTVwbmxpZ1dhcDd5Q3hLSHlVaW9hYTV0aFlBcS9YN0pHR25HVjhuQU9iUFR0STFYZlFxeWlQVjczenpaSFh0MzhNdFFKU2lkUHorTkhIZ3dVL1V6RTZ4eWx4bzY5aUF6Z2FIV09lbzlEU0p5ZTB0eVVGRjY3QmNWSlp4VVVuelBnUExCSjdPSHpQdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d0b5441-1e37-4e1a-a4b5-b7194aadd652", "record_id": "flaws_cloudtrail:0000231:4d0b5441-1e37-4e1a-a4b5-b7194aadd652", "row_index": 231, "timestamp": "2019-05-29T14:36:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d0b5441-1e37-4e1a-a4b5-b7194aadd652", "eventTime": "2019-05-29T14:36:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5MVZ4Qm9wMjc2eklxKzhrTVJ5YU0vdGJqbXdLb2RKd0dDdjFwZWZvZVUzY2ovTVFEc2pvSUJnSHVRbm1DeVRHOHdWY1Uwd2ltcUFLU1ZlRUVGemhHbkFldVMxQ3ByZXI0VDB6RzBCWkVWMThTRGhnQy91N2RFOGV3NVFCMHpnRm03Z3RxYXU2TFJTM0pHbmVyQlpESy9SeTFzSjZodVNaQjhLeXlEVm5rNHZ1bjllaHFWV2FYUXIySnR0S3dZVEcrQ3gyVFdvQlN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d0b5441-1e37-4e1a-a4b5-b7194aadd652", "record_id": "flaws_cloudtrail:0000232:4d0b5441-1e37-4e1a-a4b5-b7194aadd652", "row_index": 232, "timestamp": "2019-05-29T14:36:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d0b5441-1e37-4e1a-a4b5-b7194aadd652", "eventTime": "2019-05-29T14:36:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5MVZ4Qm9wMjc2eklxKzhrTVJ5YU0vdGJqbXdLb2RKd0dDdjFwZWZvZVUzY2ovTVFEc2pvSUJnSHVRbm1DeVRHOHdWY1Uwd2ltcUFLU1ZlRUVGemhHbkFldVMxQ3ByZXI0VDB6RzBCWkVWMThTRGhnQy91N2RFOGV3NVFCMHpnRm03Z3RxYXU2TFJTM0pHbmVyQlpESy9SeTFzSjZodVNaQjhLeXlEVm5rNHZ1bjllaHFWV2FYUXIySnR0S3dZVEcrQ3gyVFdvQlN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86e6339c-340b-4379-b907-f5d6093e53fd", "record_id": "flaws_cloudtrail:0000233:86e6339c-340b-4379-b907-f5d6093e53fd", "row_index": 233, "timestamp": "2019-05-29T14:36:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86e6339c-340b-4379-b907-f5d6093e53fd", "eventTime": "2019-05-29T14:36:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvZ3k0WHB5OVlEczBtWGFPTHY5cjB4VDVDdjBHSjROTDROUjlhcnpZdTlqc3U3ODlOSy94Z2pkM2hhbjkxMGJOZHhJSzF5dWtmQm5jcWZPcVYrcDl0NGRhRFc0ZEc2dE9PblhVcE5LUTJQRXcyaXllcEVKdHFkUGJyQk1YTTYwbi8zaFdEaEhvSlpMSHlNTVc5b2tKTHBmd0grS2thZHZNUmZ2Y3lCMC9sUjJ3ZWo0U204YTBCWEVJOGZhOEhMNWpuU0tRNGZFMEFBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86e6339c-340b-4379-b907-f5d6093e53fd", "record_id": "flaws_cloudtrail:0000234:86e6339c-340b-4379-b907-f5d6093e53fd", "row_index": 234, "timestamp": "2019-05-29T14:36:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86e6339c-340b-4379-b907-f5d6093e53fd", "eventTime": "2019-05-29T14:36:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvZ3k0WHB5OVlEczBtWGFPTHY5cjB4VDVDdjBHSjROTDROUjlhcnpZdTlqc3U3ODlOSy94Z2pkM2hhbjkxMGJOZHhJSzF5dWtmQm5jcWZPcVYrcDl0NGRhRFc0ZEc2dE9PblhVcE5LUTJQRXcyaXllcEVKdHFkUGJyQk1YTTYwbi8zaFdEaEhvSlpMSHlNTVc5b2tKTHBmd0grS2thZHZNUmZ2Y3lCMC9sUjJ3ZWo0U204YTBCWEVJOGZhOEhMNWpuU0tRNGZFMEFBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d3bca81-7125-498a-b1a2-24e948bba105", "record_id": "flaws_cloudtrail:0000235:8d3bca81-7125-498a-b1a2-24e948bba105", "row_index": 235, "timestamp": "2019-05-29T14:36:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d3bca81-7125-498a-b1a2-24e948bba105", "eventTime": "2019-05-29T14:36:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwdmc4ZG5YYng3akprWTJ0cnRtYTFjLzVleisxd0JwcFMzTkd3eURFdldSUlJnSDBLVXJLWElyaTBtSXRWMWhqYmtxdXpvOFhIczZOMFQyU2w3NWdBZDdXU1AxWW5jeEJqTmFPcC90ZHZiZzZhOTZTaFdXSm1ua1BHSEQ5R0RZSzErMVpLUXFMRVlpUk9WUXNCSmF3eGhZaE9vQlVmWnZ3ZjdlYnRteTZsM1ljcnJWT2lMdVpRV01tT3lWeHBBNWkycU83SEpaOC84RlRzQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d3bca81-7125-498a-b1a2-24e948bba105", "record_id": "flaws_cloudtrail:0000236:8d3bca81-7125-498a-b1a2-24e948bba105", "row_index": 236, "timestamp": "2019-05-29T14:36:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d3bca81-7125-498a-b1a2-24e948bba105", "eventTime": "2019-05-29T14:36:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwdmc4ZG5YYng3akprWTJ0cnRtYTFjLzVleisxd0JwcFMzTkd3eURFdldSUlJnSDBLVXJLWElyaTBtSXRWMWhqYmtxdXpvOFhIczZOMFQyU2w3NWdBZDdXU1AxWW5jeEJqTmFPcC90ZHZiZzZhOTZTaFdXSm1ua1BHSEQ5R0RZSzErMVpLUXFMRVlpUk9WUXNCSmF3eGhZaE9vQlVmWnZ3ZjdlYnRteTZsM1ljcnJWT2lMdVpRV01tT3lWeHBBNWkycU83SEpaOC84RlRzQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "039fa0de-f002-425d-8c0c-ed69896b07fc", "record_id": "flaws_cloudtrail:0000237:039fa0de-f002-425d-8c0c-ed69896b07fc", "row_index": 237, "timestamp": "2019-05-29T14:36:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "039fa0de-f002-425d-8c0c-ed69896b07fc", "eventTime": "2019-05-29T14:36:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHeFF5aTdkMmVHZEpMTUdBRFVYMDhmM1UrQm5hSVZQM2ZHVGppajE0N3NJZmtUZ0dQL3hkWXN5RWRWYk1MNDBOQTAvYXdLSG1KSjhKN0ZiN3ZwRmZaME9oWHBYUmtBWUEvSlF6b0MyczRpOHI3RjZsdDdKSlpFY0tpWEdlVFZYNUtOYTdWRFdRM29Wc0hSekdSOFNhVzJ4MzFicGF6ZjYyVFlBZ1Fuc0VISUdRODV2UE02Q3FwK0tjR05rUng4aVY5TkZKNmYyZUdsMXdudz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "039fa0de-f002-425d-8c0c-ed69896b07fc", "record_id": "flaws_cloudtrail:0000238:039fa0de-f002-425d-8c0c-ed69896b07fc", "row_index": 238, "timestamp": "2019-05-29T14:36:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "039fa0de-f002-425d-8c0c-ed69896b07fc", "eventTime": "2019-05-29T14:36:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHeFF5aTdkMmVHZEpMTUdBRFVYMDhmM1UrQm5hSVZQM2ZHVGppajE0N3NJZmtUZ0dQL3hkWXN5RWRWYk1MNDBOQTAvYXdLSG1KSjhKN0ZiN3ZwRmZaME9oWHBYUmtBWUEvSlF6b0MyczRpOHI3RjZsdDdKSlpFY0tpWEdlVFZYNUtOYTdWRFdRM29Wc0hSekdSOFNhVzJ4MzFicGF6ZjYyVFlBZ1Fuc0VISUdRODV2UE02Q3FwK0tjR05rUng4aVY5TkZKNmYyZUdsMXdudz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a119b03-7e3d-4c4b-b9fd-57dfd2490dfe", "record_id": "flaws_cloudtrail:0000239:6a119b03-7e3d-4c4b-b9fd-57dfd2490dfe", "row_index": 239, "timestamp": "2019-05-29T14:36:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a119b03-7e3d-4c4b-b9fd-57dfd2490dfe", "eventTime": "2019-05-29T14:36:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4anliWlRHOWRCVEhuaFdXbmNzalg5OHpkQVdXQlY0ZDRKS1VLU2lsRGM4Wko3WEpiUjZjNUVuQ2FYNVlCNUpVWlNBb1JvU2l1UmphQkcrTitUVlhtTENUZE1QVm1qeGFCM20wb3p5V2FxOUpSOE1LMElZK3lCYUkrNkFQNmZrcTlaemxBeDdoQmJPMHM1clFCTUF3dnRaTkpVS1lFcTQrYldHaE9xejUzNnFRWmQrd21uUFRzeXhWU1dneFlJc2gyL2JNMnlFVVdUOElJQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a119b03-7e3d-4c4b-b9fd-57dfd2490dfe", "record_id": "flaws_cloudtrail:0000240:6a119b03-7e3d-4c4b-b9fd-57dfd2490dfe", "row_index": 240, "timestamp": "2019-05-29T14:36:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a119b03-7e3d-4c4b-b9fd-57dfd2490dfe", "eventTime": "2019-05-29T14:36:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4anliWlRHOWRCVEhuaFdXbmNzalg5OHpkQVdXQlY0ZDRKS1VLU2lsRGM4Wko3WEpiUjZjNUVuQ2FYNVlCNUpVWlNBb1JvU2l1UmphQkcrTitUVlhtTENUZE1QVm1qeGFCM20wb3p5V2FxOUpSOE1LMElZK3lCYUkrNkFQNmZrcTlaemxBeDdoQmJPMHM1clFCTUF3dnRaTkpVS1lFcTQrYldHaE9xejUzNnFRWmQrd21uUFRzeXhWU1dneFlJc2gyL2JNMnlFVVdUOElJQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad26bd6f-1bcc-4c5f-a347-2d1b8ed3bf5a", "record_id": "flaws_cloudtrail:0000241:ad26bd6f-1bcc-4c5f-a347-2d1b8ed3bf5a", "row_index": 241, "timestamp": "2019-05-29T14:36:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad26bd6f-1bcc-4c5f-a347-2d1b8ed3bf5a", "eventTime": "2019-05-29T14:36:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzRkoyQXlFVXJVcnNFNFFMK0NOV0ptWW1GbWpTUjZtRUtkRlpzRFdzZ3pZTFpWMlZuaDRWU091OGN6OUcyMkRldDJsajNQSDBVWTc0aWJzYUpWckw4MzcxVXMwTGpUSVFVWi80Zk1yMmxOS01wdmZlRWpTc1BkdFRVNmNIWEozdnFZYVpwM21TbXhHd25mYmhYdUd2NDNVME1HWWhTaWR6MjU5WGtJK0h1MHYyNU1VQ3NxNjBLVEljbEtJU0VScGVNSkQ4bUcxazg0alBLZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad26bd6f-1bcc-4c5f-a347-2d1b8ed3bf5a", "record_id": "flaws_cloudtrail:0000242:ad26bd6f-1bcc-4c5f-a347-2d1b8ed3bf5a", "row_index": 242, "timestamp": "2019-05-29T14:36:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad26bd6f-1bcc-4c5f-a347-2d1b8ed3bf5a", "eventTime": "2019-05-29T14:36:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzRkoyQXlFVXJVcnNFNFFMK0NOV0ptWW1GbWpTUjZtRUtkRlpzRFdzZ3pZTFpWMlZuaDRWU091OGN6OUcyMkRldDJsajNQSDBVWTc0aWJzYUpWckw4MzcxVXMwTGpUSVFVWi80Zk1yMmxOS01wdmZlRWpTc1BkdFRVNmNIWEozdnFZYVpwM21TbXhHd25mYmhYdUd2NDNVME1HWWhTaWR6MjU5WGtJK0h1MHYyNU1VQ3NxNjBLVEljbEtJU0VScGVNSkQ4bUcxazg0alBLZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1c582256-63f7-457d-9a41-4cbb25658b48", "record_id": "flaws_cloudtrail:0000243:b1c582256-63f7-457d-9a41-4cbb25658b48", "row_index": 243, "timestamp": "2019-05-29T14:36:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1c582256-63f7-457d-9a41-4cbb25658b48", "eventTime": "2019-05-29T14:36:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXUVp6clZJSitkRXBJK3dQcG15MTdsc1c4US9uQXcza2dXWHgvQldkWm1NM3ovM3VaNXJ6L0dkNlFWSlRVZmhveUp4WUQ2SWRwTlJQbkNPNlNsVHpzTXJUTkdCUkZPZElNREZpL2xUK1FBZk9pZ1NrS0lud3N4YlhzTFhBa1lTLzlBYVZaMCtDYURhZjBGL2dHaTVaS1kyVndyOXVaenhKTGVaVmNXOU1XYmJ4eFZjVjZpZ1kzOExGbjh3SjRqYm1ERFpvSVRXKzVNbnpBZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1c582256-63f7-457d-9a41-4cbb25658b48", "record_id": "flaws_cloudtrail:0000244:b1c582256-63f7-457d-9a41-4cbb25658b48", "row_index": 244, "timestamp": "2019-05-29T14:36:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1c582256-63f7-457d-9a41-4cbb25658b48", "eventTime": "2019-05-29T14:36:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXUVp6clZJSitkRXBJK3dQcG15MTdsc1c4US9uQXcza2dXWHgvQldkWm1NM3ovM3VaNXJ6L0dkNlFWSlRVZmhveUp4WUQ2SWRwTlJQbkNPNlNsVHpzTXJUTkdCUkZPZElNREZpL2xUK1FBZk9pZ1NrS0lud3N4YlhzTFhBa1lTLzlBYVZaMCtDYURhZjBGL2dHaTVaS1kyVndyOXVaenhKTGVaVmNXOU1XYmJ4eFZjVjZpZ1kzOExGbjh3SjRqYm1ERFpvSVRXKzVNbnpBZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9e93955-be8d-4ae2-b227-5159bdccc8e9", "record_id": "flaws_cloudtrail:0000245:b9e93955-be8d-4ae2-b227-5159bdccc8e9", "row_index": 245, "timestamp": "2019-05-29T14:36:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9e93955-be8d-4ae2-b227-5159bdccc8e9", "eventTime": "2019-05-29T14:36:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnSGN2azlqUmpMR1huWXFEZHdvMnp6MXUzRjJ4b1p0djVBRXFhNWlzaEFrdHJBOHMzN1NDTVVLY09odm9tN2Y5VFFxVHZkOENwVWU1V2h1N3c0QmVGVVlDa0lxeWFqVVE2QU9VU1RPamdhNStmTTNOZ3RaM21waDN6NmZLMWtsOHR4TkQzSEhCYXBoSUV2UkVuaVJJeDFYdm1oLzZJaU1xM2JLRE8wWXhqU2ZDT1YwdUw5Y3pzWGsrWDVxeWp1eUZ3d2RXNDVubTRPcjdzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9e93955-be8d-4ae2-b227-5159bdccc8e9", "record_id": "flaws_cloudtrail:0000246:b9e93955-be8d-4ae2-b227-5159bdccc8e9", "row_index": 246, "timestamp": "2019-05-29T14:36:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9e93955-be8d-4ae2-b227-5159bdccc8e9", "eventTime": "2019-05-29T14:36:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnSGN2azlqUmpMR1huWXFEZHdvMnp6MXUzRjJ4b1p0djVBRXFhNWlzaEFrdHJBOHMzN1NDTVVLY09odm9tN2Y5VFFxVHZkOENwVWU1V2h1N3c0QmVGVVlDa0lxeWFqVVE2QU9VU1RPamdhNStmTTNOZ3RaM21waDN6NmZLMWtsOHR4TkQzSEhCYXBoSUV2UkVuaVJJeDFYdm1oLzZJaU1xM2JLRE8wWXhqU2ZDT1YwdUw5Y3pzWGsrWDVxeWp1eUZ3d2RXNDVubTRPcjdzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c617ce5-e66a-4f8c-ac23-e89e0f944793", "record_id": "flaws_cloudtrail:0000247:2c617ce5-e66a-4f8c-ac23-e89e0f944793", "row_index": 247, "timestamp": "2019-05-29T14:36:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c617ce5-e66a-4f8c-ac23-e89e0f944793", "eventTime": "2019-05-29T14:36:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNekI5YnFzNXZvU21ab2h5N282MFhGU2QvVGs5QjRCWmF3RzhCQjNXQkFkYUlpWENXc2ZnZW1JQ1BjWi9VRVVCT2FzNzBzV09KVlMrQUZhWmY5MkNKUWE5b3BqNi9iQUZtMHJIQ0xmUmxSaXBWWlJub2ZEOE5wK2NYYnh6QnZKOWVEZXpFUHdNMmZ3cGlYMlhYNW1NdENtdVpldHVNcUJxQmtNbXNRSFNIenAzYXVuVzFxcEFLbFhEQUtockJvSmZaLys3NXlHYXQ0RGE0QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c617ce5-e66a-4f8c-ac23-e89e0f944793", "record_id": "flaws_cloudtrail:0000248:2c617ce5-e66a-4f8c-ac23-e89e0f944793", "row_index": 248, "timestamp": "2019-05-29T14:36:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c617ce5-e66a-4f8c-ac23-e89e0f944793", "eventTime": "2019-05-29T14:36:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNekI5YnFzNXZvU21ab2h5N282MFhGU2QvVGs5QjRCWmF3RzhCQjNXQkFkYUlpWENXc2ZnZW1JQ1BjWi9VRVVCT2FzNzBzV09KVlMrQUZhWmY5MkNKUWE5b3BqNi9iQUZtMHJIQ0xmUmxSaXBWWlJub2ZEOE5wK2NYYnh6QnZKOWVEZXpFUHdNMmZ3cGlYMlhYNW1NdENtdVpldHVNcUJxQmtNbXNRSFNIenAzYXVuVzFxcEFLbFhEQUtockJvSmZaLys3NXlHYXQ0RGE0QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f6380a4-203b-426a-be9c-f1e96d896844", "record_id": "flaws_cloudtrail:0000249:6f6380a4-203b-426a-be9c-f1e96d896844", "row_index": 249, "timestamp": "2019-05-29T14:36:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f6380a4-203b-426a-be9c-f1e96d896844", "eventTime": "2019-05-29T14:36:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtclE2c01JUko3dnprU3U1NUg5THJsbG42MDJCTFVVSFcxdUJaRHFKMEhxMmwvMXdJYmVBdUxZa0hydWhWUkN3LzNhalFPR3JkMG41K2xOd21rbE9kT3MzUXNNQWx4cTYrM01mQ0lDWFpmb0crek96Q0k4R3lnMEpvdjRaQWhrcXdSODBzNzkvMFJxUGdxWUhsVFRDR0ZjN0lkSFBGUm1qSWRwM3ZqbTJKbDc5cEorWVN4WFpMUEpsZEIzVmZZajF0djRLVEdaZ1lBZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f6380a4-203b-426a-be9c-f1e96d896844", "record_id": "flaws_cloudtrail:0000250:6f6380a4-203b-426a-be9c-f1e96d896844", "row_index": 250, "timestamp": "2019-05-29T14:36:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f6380a4-203b-426a-be9c-f1e96d896844", "eventTime": "2019-05-29T14:36:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtclE2c01JUko3dnprU3U1NUg5THJsbG42MDJCTFVVSFcxdUJaRHFKMEhxMmwvMXdJYmVBdUxZa0hydWhWUkN3LzNhalFPR3JkMG41K2xOd21rbE9kT3MzUXNNQWx4cTYrM01mQ0lDWFpmb0crek96Q0k4R3lnMEpvdjRaQWhrcXdSODBzNzkvMFJxUGdxWUhsVFRDR0ZjN0lkSFBGUm1qSWRwM3ZqbTJKbDc5cEorWVN4WFpMUEpsZEIzVmZZajF0djRLVEdaZ1lBZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5626b545-c963-405a-b44a-0cf5cae9b96b", "record_id": "flaws_cloudtrail:0000251:5626b545-c963-405a-b44a-0cf5cae9b96b", "row_index": 251, "timestamp": "2019-05-29T14:36:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5626b545-c963-405a-b44a-0cf5cae9b96b", "eventTime": "2019-05-29T14:36:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIV1JIWFpudVdBaFVWWnZnSHVYUkg5UlA5Q3RPNWdtN0hBbGpYVkMyemg3ek9JUlFiejFlcURNZS9oRFU3YkNKOGl0d29CdWp4eFhoYkM0Qy9UL1lRV1N5NlVDaFRyYlM4NGRIWDNUOWI4aEZzQjNtaGtNcURYSkdTeHZjNCtUdjcxODV2L2dheFRsb3FkUVcyckRuUUhWbTd6MHhlNTNtSm90RnFibVRLMWJ0WHZMTDVEbWJHTGk4dlFiWFJuTWcwWk5TcG9wMGtVdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5626b545-c963-405a-b44a-0cf5cae9b96b", "record_id": "flaws_cloudtrail:0000252:5626b545-c963-405a-b44a-0cf5cae9b96b", "row_index": 252, "timestamp": "2019-05-29T14:36:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5626b545-c963-405a-b44a-0cf5cae9b96b", "eventTime": "2019-05-29T14:36:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIV1JIWFpudVdBaFVWWnZnSHVYUkg5UlA5Q3RPNWdtN0hBbGpYVkMyemg3ek9JUlFiejFlcURNZS9oRFU3YkNKOGl0d29CdWp4eFhoYkM0Qy9UL1lRV1N5NlVDaFRyYlM4NGRIWDNUOWI4aEZzQjNtaGtNcURYSkdTeHZjNCtUdjcxODV2L2dheFRsb3FkUVcyckRuUUhWbTd6MHhlNTNtSm90RnFibVRLMWJ0WHZMTDVEbWJHTGk4dlFiWFJuTWcwWk5TcG9wMGtVdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63a1d333-3670-429a-a480-8c4adc886e0b", "record_id": "flaws_cloudtrail:0000253:63a1d333-3670-429a-a480-8c4adc886e0b", "row_index": 253, "timestamp": "2019-05-29T14:36:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63a1d333-3670-429a-a480-8c4adc886e0b", "eventTime": "2019-05-29T14:36:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYSWlqcFZ3WUpzV0RiNDlESk1VNWhzb0xvaUZSRE8vM1FLbGNnS0dJU1E1eFBJQ2NpYmNtWXdWamNyN3p3Smk0dTdYVWZVQjU3Y2I3ZXlTaS9Fd1FBaDlwYTFOSWo1MXlSTXJuT2F0b0lnTmc4SzR4aTEyS1p5SDJtZ2l6NVp3bm1ITHBHMjJTVHBCNzJNSm5DWGhieHVNMHdkZ05QNFZRZ1kxeHRuMHNLbkJCT0Z0Rmw3WTM5cWZ0QWp1WDJ6a3I0UE9MV1Y1QXY1UzhQQllMR1N3QnNrMCtXSzVOSXNRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63a1d333-3670-429a-a480-8c4adc886e0b", "record_id": "flaws_cloudtrail:0000254:63a1d333-3670-429a-a480-8c4adc886e0b", "row_index": 254, "timestamp": "2019-05-29T14:36:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63a1d333-3670-429a-a480-8c4adc886e0b", "eventTime": "2019-05-29T14:36:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYSWlqcFZ3WUpzV0RiNDlESk1VNWhzb0xvaUZSRE8vM1FLbGNnS0dJU1E1eFBJQ2NpYmNtWXdWamNyN3p3Smk0dTdYVWZVQjU3Y2I3ZXlTaS9Fd1FBaDlwYTFOSWo1MXlSTXJuT2F0b0lnTmc4SzR4aTEyS1p5SDJtZ2l6NVp3bm1ITHBHMjJTVHBCNzJNSm5DWGhieHVNMHdkZ05QNFZRZ1kxeHRuMHNLbkJCT0Z0Rmw3WTM5cWZ0QWp1WDJ6a3I0UE9MV1Y1QXY1UzhQQllMR1N3QnNrMCtXSzVOSXNRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92eb2890-0b15-4749-a3c1-af0f263a28d3", "record_id": "flaws_cloudtrail:0000255:92eb2890-0b15-4749-a3c1-af0f263a28d3", "row_index": 255, "timestamp": "2019-05-29T14:36:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92eb2890-0b15-4749-a3c1-af0f263a28d3", "eventTime": "2019-05-29T14:36:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwKzJhZUV4ekZhNEoxa2hBbk9DV1RpdnVDUnhSbWFPeFFMRGZ3QzJYcjhrdGltVzZ6d055KzN2ZnhTS3NJZTQxbXdMSitsdVEzdC9nRzhaN1FEVnZsL1hPdTllZGJkVGdvOTNMVWZkekJ2ZTcvU1NTdzlxNTlHNHRGYzF6MmJ2S0dCMjBxWmJRSkJQTXlldnpRWGt2MGtUTFhiRXlLWUVPK1BHNU8rUjBrNHQ2OGxtRXhSSmx6ckE4dVh2NiswOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92eb2890-0b15-4749-a3c1-af0f263a28d3", "record_id": "flaws_cloudtrail:0000256:92eb2890-0b15-4749-a3c1-af0f263a28d3", "row_index": 256, "timestamp": "2019-05-29T14:36:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92eb2890-0b15-4749-a3c1-af0f263a28d3", "eventTime": "2019-05-29T14:36:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwKzJhZUV4ekZhNEoxa2hBbk9DV1RpdnVDUnhSbWFPeFFMRGZ3QzJYcjhrdGltVzZ6d055KzN2ZnhTS3NJZTQxbXdMSitsdVEzdC9nRzhaN1FEVnZsL1hPdTllZGJkVGdvOTNMVWZkekJ2ZTcvU1NTdzlxNTlHNHRGYzF6MmJ2S0dCMjBxWmJRSkJQTXlldnpRWGt2MGtUTFhiRXlLWUVPK1BHNU8rUjBrNHQ2OGxtRXhSSmx6ckE4dVh2NiswOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3834d33-6721-4bfe-a513-1f01cc975938", "record_id": "flaws_cloudtrail:0000257:a3834d33-6721-4bfe-a513-1f01cc975938", "row_index": 257, "timestamp": "2019-05-29T14:37:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3834d33-6721-4bfe-a513-1f01cc975938", "eventTime": "2019-05-29T14:37:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5R1ppOXNpekltb1JiSk05TkZ1QWQ1SmNtS2V2M1duT0tHV3lNSWdZblkybjZHT3FLQzhId25vczVuYjlRN2wrUU1vT1FqMHFKSnZlb29QUVBWSGV5YWZtV0NOejhzajI4V0I0TXE3cldPSWI0NDZaZ2V1R2o3Ylk3bjIvSTM2UDVBeXZ3Y1gxb3dFZk10N3RhYm9rTDY4YVhnQlRKbUR4cHlUbFkyWlJNeWZtZUw5a2MwdjdBS1RjYjJDc3lHcGVycEhNQ0tFMGJCNW5YZWNUM01BM1BBREtOSVNRY3lnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3834d33-6721-4bfe-a513-1f01cc975938", "record_id": "flaws_cloudtrail:0000258:a3834d33-6721-4bfe-a513-1f01cc975938", "row_index": 258, "timestamp": "2019-05-29T14:37:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3834d33-6721-4bfe-a513-1f01cc975938", "eventTime": "2019-05-29T14:37:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5R1ppOXNpekltb1JiSk05TkZ1QWQ1SmNtS2V2M1duT0tHV3lNSWdZblkybjZHT3FLQzhId25vczVuYjlRN2wrUU1vT1FqMHFKSnZlb29QUVBWSGV5YWZtV0NOejhzajI4V0I0TXE3cldPSWI0NDZaZ2V1R2o3Ylk3bjIvSTM2UDVBeXZ3Y1gxb3dFZk10N3RhYm9rTDY4YVhnQlRKbUR4cHlUbFkyWlJNeWZtZUw5a2MwdjdBS1RjYjJDc3lHcGVycEhNQ0tFMGJCNW5YZWNUM01BM1BBREtOSVNRY3lnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dffad4e-fe53-4e87-876c-35863a24fd26", "record_id": "flaws_cloudtrail:0000259:4dffad4e-fe53-4e87-876c-35863a24fd26", "row_index": 259, "timestamp": "2019-05-29T14:37:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dffad4e-fe53-4e87-876c-35863a24fd26", "eventTime": "2019-05-29T14:37:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXZzltbEpsakhDU0NUN1RUeGZuRFJ3djVmQUgyR1c1cXRKOVlqQzZMTTluRnkvQ0VhY1ZqdEgxYVc4QUxkN0I0WmRYeXVNaXE5eDZmOWltS0M0OHRWM1I1YzJ6QnVTMTg0bWtaaXZZT0xDTTQvRXdaZXBBcFVOSEJpZFVlSUdmb2dJSFAzYkJQeW1od1pwRm95dVpFNThDeDRrV3VCdHhUWXNTN0NReFJmWXdMcFIxbU0vZUFDRHIzdGM0SzdaTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dffad4e-fe53-4e87-876c-35863a24fd26", "record_id": "flaws_cloudtrail:0000260:4dffad4e-fe53-4e87-876c-35863a24fd26", "row_index": 260, "timestamp": "2019-05-29T14:37:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dffad4e-fe53-4e87-876c-35863a24fd26", "eventTime": "2019-05-29T14:37:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXZzltbEpsakhDU0NUN1RUeGZuRFJ3djVmQUgyR1c1cXRKOVlqQzZMTTluRnkvQ0VhY1ZqdEgxYVc4QUxkN0I0WmRYeXVNaXE5eDZmOWltS0M0OHRWM1I1YzJ6QnVTMTg0bWtaaXZZT0xDTTQvRXdaZXBBcFVOSEJpZFVlSUdmb2dJSFAzYkJQeW1od1pwRm95dVpFNThDeDRrV3VCdHhUWXNTN0NReFJmWXdMcFIxbU0vZUFDRHIzdGM0SzdaTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c3e6710-66ba-42b1-8453-1fe2ca0f075b", "record_id": "flaws_cloudtrail:0000261:5c3e6710-66ba-42b1-8453-1fe2ca0f075b", "row_index": 261, "timestamp": "2019-05-29T14:37:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c3e6710-66ba-42b1-8453-1fe2ca0f075b", "eventTime": "2019-05-29T14:37:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCYzU3QkI2L092RGNEZUNHSFB6bVNtQWFKamRnWmIrVXZRTVAxNENXZDRYQU1xMDFVZ0FNUE12TzEyaEl0YWFIc2pVWnNQRE9XYXJrckYwY3BmRGs0UDBmMmt5eStqRVVodWM4UUI0V1V3aFNZMEZQR0RmeUZFQ1lRWTdZMG5UZnUwbWZMMHkwd1hVWW5jUmE1dWhpSXkreUZPTjRGQ3BMY1Y5amphNmsvWTZ0YU1wTVEvc1ZQclVIa2l5YkFjL2d2WFJwRCtJaEo5V2ZCVkZkdGE3UEt3MmRZTitnaE5rPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c3e6710-66ba-42b1-8453-1fe2ca0f075b", "record_id": "flaws_cloudtrail:0000262:5c3e6710-66ba-42b1-8453-1fe2ca0f075b", "row_index": 262, "timestamp": "2019-05-29T14:37:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c3e6710-66ba-42b1-8453-1fe2ca0f075b", "eventTime": "2019-05-29T14:37:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCYzU3QkI2L092RGNEZUNHSFB6bVNtQWFKamRnWmIrVXZRTVAxNENXZDRYQU1xMDFVZ0FNUE12TzEyaEl0YWFIc2pVWnNQRE9XYXJrckYwY3BmRGs0UDBmMmt5eStqRVVodWM4UUI0V1V3aFNZMEZQR0RmeUZFQ1lRWTdZMG5UZnUwbWZMMHkwd1hVWW5jUmE1dWhpSXkreUZPTjRGQ3BMY1Y5amphNmsvWTZ0YU1wTVEvc1ZQclVIa2l5YkFjL2d2WFJwRCtJaEo5V2ZCVkZkdGE3UEt3MmRZTitnaE5rPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ef41a7b-03e0-4690-920d-8b6ec1c83b36", "record_id": "flaws_cloudtrail:0000263:0ef41a7b-03e0-4690-920d-8b6ec1c83b36", "row_index": 263, "timestamp": "2019-05-29T14:37:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ef41a7b-03e0-4690-920d-8b6ec1c83b36", "eventTime": "2019-05-29T14:37:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYUDM4RCtoRWwzRi9FV1puQ21NVjMvOUVBU3RIdm5aVWt4SUx3dmc2VVRlaGxEZFVqNE5aN293c1JYaElqNkoyY2VYOUxaUW1iNnc2Q0NENmJacEtYMDhuUXZpUDd0cG5oaU9yVnNYMy9FRVZkQ0QxQTRGeE5QZzY3RmY4bXVWRkY4c1lPSlNsektjdm0raHhOVmRQQzlZdUxvM2M2YXdySkJIQjFkODBpZ1NZdldFWHpVM1A2cGF4WXFJS0pMQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ef41a7b-03e0-4690-920d-8b6ec1c83b36", "record_id": "flaws_cloudtrail:0000264:0ef41a7b-03e0-4690-920d-8b6ec1c83b36", "row_index": 264, "timestamp": "2019-05-29T14:37:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ef41a7b-03e0-4690-920d-8b6ec1c83b36", "eventTime": "2019-05-29T14:37:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYUDM4RCtoRWwzRi9FV1puQ21NVjMvOUVBU3RIdm5aVWt4SUx3dmc2VVRlaGxEZFVqNE5aN293c1JYaElqNkoyY2VYOUxaUW1iNnc2Q0NENmJacEtYMDhuUXZpUDd0cG5oaU9yVnNYMy9FRVZkQ0QxQTRGeE5QZzY3RmY4bXVWRkY4c1lPSlNsektjdm0raHhOVmRQQzlZdUxvM2M2YXdySkJIQjFkODBpZ1NZdldFWHpVM1A2cGF4WXFJS0pMQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "243c61a4-d50b-4e3f-bfd8-8ca5cafc8535", "record_id": "flaws_cloudtrail:0000265:243c61a4-d50b-4e3f-bfd8-8ca5cafc8535", "row_index": 265, "timestamp": "2019-05-29T14:37:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "243c61a4-d50b-4e3f-bfd8-8ca5cafc8535", "eventTime": "2019-05-29T14:37:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGd0NCZ2c5c25HYXM1ajZDM0ZhTXgzTy9QMU04U3lVbDJlNms5SWZVZXA3aVZjUzBvZ1BqVUtFZEp1ZlJPMnkwR3JDdHJ4VFJWSStkc0htV3hyVWhPcTl5RjNhVUVtejNBQnZnZlp2ZFAyeFVWSHFTWWpxTUxCd2ZLSWttR3hXVWtvL2tzaiswVHhkTGVRRlk5bEIyNURUUTRQNDNjWFJaK2V1L1AvOXJNaGhRa0ZWdGdHVUYrMkcrS1BTNk1Zdm8ySmJ3Zk5xWlhKMUFsbUtxSTdIM2ZZemVKWkllZDlrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "243c61a4-d50b-4e3f-bfd8-8ca5cafc8535", "record_id": "flaws_cloudtrail:0000266:243c61a4-d50b-4e3f-bfd8-8ca5cafc8535", "row_index": 266, "timestamp": "2019-05-29T14:37:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "243c61a4-d50b-4e3f-bfd8-8ca5cafc8535", "eventTime": "2019-05-29T14:37:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGd0NCZ2c5c25HYXM1ajZDM0ZhTXgzTy9QMU04U3lVbDJlNms5SWZVZXA3aVZjUzBvZ1BqVUtFZEp1ZlJPMnkwR3JDdHJ4VFJWSStkc0htV3hyVWhPcTl5RjNhVUVtejNBQnZnZlp2ZFAyeFVWSHFTWWpxTUxCd2ZLSWttR3hXVWtvL2tzaiswVHhkTGVRRlk5bEIyNURUUTRQNDNjWFJaK2V1L1AvOXJNaGhRa0ZWdGdHVUYrMkcrS1BTNk1Zdm8ySmJ3Zk5xWlhKMUFsbUtxSTdIM2ZZemVKWkllZDlrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efced105-5966-4d14-852c-6c76bee733d8", "record_id": "flaws_cloudtrail:0000267:efced105-5966-4d14-852c-6c76bee733d8", "row_index": 267, "timestamp": "2019-05-29T14:37:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efced105-5966-4d14-852c-6c76bee733d8", "eventTime": "2019-05-29T14:37:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrTHZpVkZrdDBQT1dwYTZFMDRQNlFka1FIQ0tkbGNjL1ZlY25NS1BhMkxRT1RuQ0JRNVVZdGdxUGcwU3pSVHNLbXhaRGxibnNUYjROM05FZ2tVOUNHR2had1ZabENFb1B0TVNlTTFxWVlYa3hWMW5Jam5Kc29mT0pFdldOTSthSzd5SGNYWW9hMWdmSnRsNi9rRUJVZHB3VTE4SXhhWXQ4RC83YVEzOSt2OXhrTWo4Wm4rejdZYlhRTDlSeUtXRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efced105-5966-4d14-852c-6c76bee733d8", "record_id": "flaws_cloudtrail:0000268:efced105-5966-4d14-852c-6c76bee733d8", "row_index": 268, "timestamp": "2019-05-29T14:37:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efced105-5966-4d14-852c-6c76bee733d8", "eventTime": "2019-05-29T14:37:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrTHZpVkZrdDBQT1dwYTZFMDRQNlFka1FIQ0tkbGNjL1ZlY25NS1BhMkxRT1RuQ0JRNVVZdGdxUGcwU3pSVHNLbXhaRGxibnNUYjROM05FZ2tVOUNHR2had1ZabENFb1B0TVNlTTFxWVlYa3hWMW5Jam5Kc29mT0pFdldOTSthSzd5SGNYWW9hMWdmSnRsNi9rRUJVZHB3VTE4SXhhWXQ4RC83YVEzOSt2OXhrTWo4Wm4rejdZYlhRTDlSeUtXRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baf42db3-dc93-4af2-b1b5-e822ce4c8946", "record_id": "flaws_cloudtrail:0000269:baf42db3-dc93-4af2-b1b5-e822ce4c8946", "row_index": 269, "timestamp": "2019-05-29T14:37:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baf42db3-dc93-4af2-b1b5-e822ce4c8946", "eventTime": "2019-05-29T14:37:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5T1VLZzJZSENLcThSUnhsOGtXMkh5RGNlUnJ5YThyV0JBN3pUbHdnM2lrcEY0WkZ5WGdSL0Z3L1MzTXpBb2VkaUtMSHlnbWZVbUJ2VmdJUnB6TENXOTdGVDZLcXU0cjdBR1NLTmw5SHhPVlhsSVpDZ0F2OVVnczYzNFlxSzVjNzArRWNiMFlMeVBVNzh3TDc3OFRnNWhpYmY3NE16b2E1TnI2ZDlqQkdxU0J3elBHN25iNzBRL2lPUFI2OGxOS1VERlZLbXRoYU5IaWRkV0theCtMZjRxK0RVZ2tIcmtzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baf42db3-dc93-4af2-b1b5-e822ce4c8946", "record_id": "flaws_cloudtrail:0000270:baf42db3-dc93-4af2-b1b5-e822ce4c8946", "row_index": 270, "timestamp": "2019-05-29T14:37:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baf42db3-dc93-4af2-b1b5-e822ce4c8946", "eventTime": "2019-05-29T14:37:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5T1VLZzJZSENLcThSUnhsOGtXMkh5RGNlUnJ5YThyV0JBN3pUbHdnM2lrcEY0WkZ5WGdSL0Z3L1MzTXpBb2VkaUtMSHlnbWZVbUJ2VmdJUnB6TENXOTdGVDZLcXU0cjdBR1NLTmw5SHhPVlhsSVpDZ0F2OVVnczYzNFlxSzVjNzArRWNiMFlMeVBVNzh3TDc3OFRnNWhpYmY3NE16b2E1TnI2ZDlqQkdxU0J3elBHN25iNzBRL2lPUFI2OGxOS1VERlZLbXRoYU5IaWRkV0theCtMZjRxK0RVZ2tIcmtzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f770c7bb-979d-49d8-8f2e-527aec32fd6d", "record_id": "flaws_cloudtrail:0000271:f770c7bb-979d-49d8-8f2e-527aec32fd6d", "row_index": 271, "timestamp": "2019-05-29T14:37:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f770c7bb-979d-49d8-8f2e-527aec32fd6d", "eventTime": "2019-05-29T14:37:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpTEw5dVpXN1hHQUVGN3pVTjI1VzlGcmdmc2RuSVJ0dFcwWDNDaExNQURGcVdONVl1Y1Z5dVg2amJyaVkzZ0wySnVxc3VudHhUOWpHTTN1cDRCMDZHY1pHT3cwZi9MZVgzekY3UEdOSTkvVkJuNDVoRlVzTFcwOUJ3NElFZ21rS01TQUpZb3NrYVg1WUVVTXZQbSs1ZCsrZmFKK2Y1Qnk1R0RoL0dtNGp4RlVyRG5NM2loTkt1anNJRVY2Si9kND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f770c7bb-979d-49d8-8f2e-527aec32fd6d", "record_id": "flaws_cloudtrail:0000272:f770c7bb-979d-49d8-8f2e-527aec32fd6d", "row_index": 272, "timestamp": "2019-05-29T14:37:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f770c7bb-979d-49d8-8f2e-527aec32fd6d", "eventTime": "2019-05-29T14:37:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpTEw5dVpXN1hHQUVGN3pVTjI1VzlGcmdmc2RuSVJ0dFcwWDNDaExNQURGcVdONVl1Y1Z5dVg2amJyaVkzZ0wySnVxc3VudHhUOWpHTTN1cDRCMDZHY1pHT3cwZi9MZVgzekY3UEdOSTkvVkJuNDVoRlVzTFcwOUJ3NElFZ21rS01TQUpZb3NrYVg1WUVVTXZQbSs1ZCsrZmFKK2Y1Qnk1R0RoL0dtNGp4RlVyRG5NM2loTkt1anNJRVY2Si9kND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17659-933b-4f7d-99bd-16a7dbdefb3e", "record_id": "flaws_cloudtrail:0000273:17659-933b-4f7d-99bd-16a7dbdefb3e", "row_index": 273, "timestamp": "2019-05-29T14:39:12Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17659-933b-4f7d-99bd-16a7dbdefb3e", "eventTime": "2019-05-29T14:39:12Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17659-933b-4f7d-99bd-16a7dbdefb3e", "record_id": "flaws_cloudtrail:0000274:17659-933b-4f7d-99bd-16a7dbdefb3e", "row_index": 274, "timestamp": "2019-05-29T14:39:12Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17659-933b-4f7d-99bd-16a7dbdefb3e", "eventTime": "2019-05-29T14:39:12Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b32a909-f267-4f64-a7ad-9f9a00144e80", "record_id": "flaws_cloudtrail:0000275:1b32a909-f267-4f64-a7ad-9f9a00144e80", "row_index": 275, "timestamp": "2019-05-29T14:41:32Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b32a909-f267-4f64-a7ad-9f9a00144e80", "eventTime": "2019-05-29T14:41:32Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b32a909-f267-4f64-a7ad-9f9a00144e80", "record_id": "flaws_cloudtrail:0000276:1b32a909-f267-4f64-a7ad-9f9a00144e80", "row_index": 276, "timestamp": "2019-05-29T14:41:32Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b32a909-f267-4f64-a7ad-9f9a00144e80", "eventTime": "2019-05-29T14:41:32Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42594-cc8e-458a-8c9e-857356e2e0d3", "record_id": "flaws_cloudtrail:0000277:42594-cc8e-458a-8c9e-857356e2e0d3", "row_index": 277, "timestamp": "2019-05-29T14:41:56Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42594-cc8e-458a-8c9e-857356e2e0d3", "eventTime": "2019-05-29T14:41:56Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42594-cc8e-458a-8c9e-857356e2e0d3", "record_id": "flaws_cloudtrail:0000278:42594-cc8e-458a-8c9e-857356e2e0d3", "row_index": 278, "timestamp": "2019-05-29T14:41:56Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42594-cc8e-458a-8c9e-857356e2e0d3", "eventTime": "2019-05-29T14:41:56Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0653cbd-e7fa-4437-b558-df97e1cdcf04", "record_id": "flaws_cloudtrail:0000279:d0653cbd-e7fa-4437-b558-df97e1cdcf04", "row_index": 279, "timestamp": "2019-05-29T14:44:12Z", "event_type": "DescribePermissions", "event_source": "opsworks.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0653cbd-e7fa-4437-b558-df97e1cdcf04", "eventTime": "2019-05-29T14:44:12Z", "eventName": "DescribePermissions", "eventSource": "opsworks.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "errorMessage": "An unknown error occurred", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"iamUserArn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0653cbd-e7fa-4437-b558-df97e1cdcf04", "record_id": "flaws_cloudtrail:0000280:d0653cbd-e7fa-4437-b558-df97e1cdcf04", "row_index": 280, "timestamp": "2019-05-29T14:44:12Z", "event_type": "DescribePermissions", "event_source": "opsworks.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0653cbd-e7fa-4437-b558-df97e1cdcf04", "eventTime": "2019-05-29T14:44:12Z", "eventName": "DescribePermissions", "eventSource": "opsworks.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "errorMessage": "An unknown error occurred", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"iamUserArn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75eaecd4-f8ae-4ce7-9ea3-1cbc1c207bb0", "record_id": "flaws_cloudtrail:0000281:75eaecd4-f8ae-4ce7-9ea3-1cbc1c207bb0", "row_index": 281, "timestamp": "2019-05-29T14:44:52Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75eaecd4-f8ae-4ce7-9ea3-1cbc1c207bb0", "eventTime": "2019-05-29T14:44:52Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75eaecd4-f8ae-4ce7-9ea3-1cbc1c207bb0", "record_id": "flaws_cloudtrail:0000282:75eaecd4-f8ae-4ce7-9ea3-1cbc1c207bb0", "row_index": 282, "timestamp": "2019-05-29T14:44:52Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75eaecd4-f8ae-4ce7-9ea3-1cbc1c207bb0", "eventTime": "2019-05-29T14:44:52Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "942780-64fe-4c1b-bf97-183479db7b59f", "record_id": "flaws_cloudtrail:0000283:942780-64fe-4c1b-bf97-183479db7b59f", "row_index": 283, "timestamp": "2019-05-29T14:45:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "942780-64fe-4c1b-bf97-183479db7b59f", "eventTime": "2019-05-29T14:45:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "942780-64fe-4c1b-bf97-183479db7b59f", "record_id": "flaws_cloudtrail:0000284:942780-64fe-4c1b-bf97-183479db7b59f", "row_index": 284, "timestamp": "2019-05-29T14:45:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "175.229.151.4", "user_agent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "942780-64fe-4c1b-bf97-183479db7b59f", "eventTime": "2019-05-29T14:45:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "175.229.151.4", "userAgent": "aws-cli/1.14.50 Python/3.6.8 Linux/4.20.11-100.fc28.x86_64 botocore/1.9.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87960-8b8b-4407-bc5c-1aabdfe372bf", "record_id": "flaws_cloudtrail:0000285:87960-8b8b-4407-bc5c-1aabdfe372bf", "row_index": 285, "timestamp": "2019-05-29T15:03:02Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.172.140.252", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87960-8b8b-4407-bc5c-1aabdfe372bf", "eventTime": "2019-05-29T15:03:02Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.172.140.252", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87960-8b8b-4407-bc5c-1aabdfe372bf", "record_id": "flaws_cloudtrail:0000286:87960-8b8b-4407-bc5c-1aabdfe372bf", "row_index": 286, "timestamp": "2019-05-29T15:03:02Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.172.140.252", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87960-8b8b-4407-bc5c-1aabdfe372bf", "eventTime": "2019-05-29T15:03:02Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.172.140.252", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "980a6b33-bd15-4d27-8119-725dfa7bc2e2", "record_id": "flaws_cloudtrail:0000287:980a6b33-bd15-4d27-8119-725dfa7bc2e2", "row_index": 287, "timestamp": "2019-05-29T15:03:35Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.172.140.252", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "980a6b33-bd15-4d27-8119-725dfa7bc2e2", "eventTime": "2019-05-29T15:03:35Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.172.140.252", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "980a6b33-bd15-4d27-8119-725dfa7bc2e2", "record_id": "flaws_cloudtrail:0000288:980a6b33-bd15-4d27-8119-725dfa7bc2e2", "row_index": 288, "timestamp": "2019-05-29T15:03:35Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.172.140.252", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "980a6b33-bd15-4d27-8119-725dfa7bc2e2", "eventTime": "2019-05-29T15:03:35Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.172.140.252", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1e9bdf4-e4a5-4720-8a11-c780dd37a4d8", "record_id": "flaws_cloudtrail:0000289:e1e9bdf4-e4a5-4720-8a11-c780dd37a4d8", "row_index": 289, "timestamp": "2019-05-29T15:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1607, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1e9bdf4-e4a5-4720-8a11-c780dd37a4d8", "eventTime": "2019-05-29T15:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4Z7DE3TMUMIFZOSK", "expiration": "May 30, 2019 3:11:45 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edec12de-1235-4b12-90f3-0b4792df9a2f", "record_id": "flaws_cloudtrail:0000290:edec12de-1235-4b12-90f3-0b4792df9a2f", "row_index": 290, "timestamp": "2019-05-29T15:11:45Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAWDGM5DYU5T6TQRL9", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "255.9.254.214", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edec12de-1235-4b12-90f3-0b4792df9a2f", "eventTime": "2019-05-29T15:11:45Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.9.254.214", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAWDGM5DYU5T6TQRL9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:11:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/05/29/[$LATEST]c17485ea8664227bb5c36c3212f36427"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0ddcdc9-e3b2-41e8-ab0f-852af2fe3ada", "record_id": "flaws_cloudtrail:0000291:f0ddcdc9-e3b2-41e8-ab0f-852af2fe3ada", "row_index": 291, "timestamp": "2019-05-29T15:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1604, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0ddcdc9-e3b2-41e8-ab0f-852af2fe3ada", "eventTime": "2019-05-29T15:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWDGM5DYU5T6TQRL9", "expiration": "May 30, 2019 3:11:45 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1e9bdf4-e4a5-4720-8a11-c780dd37a4d8", "record_id": "flaws_cloudtrail:0000292:e1e9bdf4-e4a5-4720-8a11-c780dd37a4d8", "row_index": 292, "timestamp": "2019-05-29T15:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1607, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1e9bdf4-e4a5-4720-8a11-c780dd37a4d8", "eventTime": "2019-05-29T15:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4Z7DE3TMUMIFZOSK", "expiration": "May 30, 2019 3:11:45 AM", "sessionToken": "AgoJb3JpZ2luX2VjEEcaCXVzLXdlc3QtMiJIMEYCIQCyMvFC1xVyevGlh7PASXJBgE3IT55RXw5jixS4GvdizQIhAIgQpYG5JGh5FplaX5pRYnGaO0fe6KrAfIY1NH9AYPtpKoICCGAQABoMOTc1NDI2MjYyMDI5IgwvY8B15RY56N61er4q3wF483886UmVkb/L+U1dAl/PJ35ZxuWbswBsnVacE49PUrfS2KtX+Q51NQAd0k8ppxEVZtqKy1GVgYtbZQo93UWKGWK73E1ToM21NWRP0HTDdT4PuI9YMQwDb5pqLA43uL+hO4QuJiJWijaONg3BDctZuYN3jNLKl8IVJNwuv1172OPeRCo6yiXLPSIHSARdbjW1YZjZJO/vXaREpa63xrq9S3ROEGCtAmAKsrKxyttAW8hisGJAcgblkyX6AEofdLffDVCJiji8GAPJOsGKV7Ojp4znFkyBNL/rCBp/XOoUtMLHCuucFOrMBXBnIXG2qTss/cUbhORzZBC6PVxEl9P+CSWeJ9+f1jxe9tE0aie9xezBA/ZgGFFnn1MwCDA02O+wKt7Lpf/vN7cBnTEFA1lhnw/8mdZbmuzZMeITBA1QdjwR/W4ni72KEHQoJ9O8V1bayD2IC/im1zNna4tLAi54HOrv4Sec4d+2g9diznBEp08ysCOg4l77AgmhTSjZG+0Y7XOArZYZpWftRFGK+1ObYV8ldjCBNdagjKGo="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edec12de-1235-4b12-90f3-0b4792df9a2f", "record_id": "flaws_cloudtrail:0000293:edec12de-1235-4b12-90f3-0b4792df9a2f", "row_index": 293, "timestamp": "2019-05-29T15:11:45Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAWDGM5DYU5T6TQRL9", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "255.9.254.214", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edec12de-1235-4b12-90f3-0b4792df9a2f", "eventTime": "2019-05-29T15:11:45Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.9.254.214", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAWDGM5DYU5T6TQRL9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:11:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/05/29/[$LATEST]c17485ea8664227bb5c36c3212f36427"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0ddcdc9-e3b2-41e8-ab0f-852af2fe3ada", "record_id": "flaws_cloudtrail:0000294:f0ddcdc9-e3b2-41e8-ab0f-852af2fe3ada", "row_index": 294, "timestamp": "2019-05-29T15:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1604, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0ddcdc9-e3b2-41e8-ab0f-852af2fe3ada", "eventTime": "2019-05-29T15:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWDGM5DYU5T6TQRL9", "expiration": "May 30, 2019 3:11:45 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a31bc34-7c7d-48c2-9818-4860a9ab8c01", "record_id": "flaws_cloudtrail:0000295:9a31bc34-7c7d-48c2-9818-4860a9ab8c01", "row_index": 295, "timestamp": "2019-05-29T15:17:52Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.172.140.252", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a31bc34-7c7d-48c2-9818-4860a9ab8c01", "eventTime": "2019-05-29T15:17:52Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.172.140.252", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a31bc34-7c7d-48c2-9818-4860a9ab8c01", "record_id": "flaws_cloudtrail:0000296:9a31bc34-7c7d-48c2-9818-4860a9ab8c01", "row_index": 296, "timestamp": "2019-05-29T15:17:52Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.172.140.252", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a31bc34-7c7d-48c2-9818-4860a9ab8c01", "eventTime": "2019-05-29T15:17:52Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.172.140.252", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d61ccc7-9cb8-4ab1-8bc0-9c72838c210c", "record_id": "flaws_cloudtrail:0000297:3d61ccc7-9cb8-4ab1-8bc0-9c72838c210c", "row_index": 297, "timestamp": "2019-05-29T15:18:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.172.140.252", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d61ccc7-9cb8-4ab1-8bc0-9c72838c210c", "eventTime": "2019-05-29T15:18:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.172.140.252", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d61ccc7-9cb8-4ab1-8bc0-9c72838c210c", "record_id": "flaws_cloudtrail:0000298:3d61ccc7-9cb8-4ab1-8bc0-9c72838c210c", "row_index": 298, "timestamp": "2019-05-29T15:18:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.172.140.252", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d61ccc7-9cb8-4ab1-8bc0-9c72838c210c", "eventTime": "2019-05-29T15:18:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.172.140.252", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a11a5482-9c3d-464b-b61e-8b5ab2729207", "record_id": "flaws_cloudtrail:0000299:a11a5482-9c3d-464b-b61e-8b5ab2729207", "row_index": 299, "timestamp": "2019-05-29T15:24:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a11a5482-9c3d-464b-b61e-8b5ab2729207", "eventTime": "2019-05-29T15:24:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVOG3QCXUYM2WBQ52", "expiration": "May 29, 2019 9:56:55 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a11a5482-9c3d-464b-b61e-8b5ab2729207", "record_id": "flaws_cloudtrail:0000300:a11a5482-9c3d-464b-b61e-8b5ab2729207", "row_index": 300, "timestamp": "2019-05-29T15:24:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a11a5482-9c3d-464b-b61e-8b5ab2729207", "eventTime": "2019-05-29T15:24:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVOG3QCXUYM2WBQ52", "expiration": "May 29, 2019 9:56:55 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6c22440-3d0d-42f2-b152-1e9bbd941b19", "record_id": "flaws_cloudtrail:0000301:e6c22440-3d0d-42f2-b152-1e9bbd941b19", "row_index": 301, "timestamp": "2019-05-29T15:29:57Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.172.140.252", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6c22440-3d0d-42f2-b152-1e9bbd941b19", "eventTime": "2019-05-29T15:29:57Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.172.140.252", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6c22440-3d0d-42f2-b152-1e9bbd941b19", "record_id": "flaws_cloudtrail:0000302:e6c22440-3d0d-42f2-b152-1e9bbd941b19", "row_index": 302, "timestamp": "2019-05-29T15:29:57Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.172.140.252", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6c22440-3d0d-42f2-b152-1e9bbd941b19", "eventTime": "2019-05-29T15:29:57Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.172.140.252", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95b42eec-d693-4e9c-ab1b-dc257a4a6c82", "record_id": "flaws_cloudtrail:0000303:95b42eec-d693-4e9c-ab1b-dc257a4a6c82", "row_index": 303, "timestamp": "2019-05-29T15:30:37Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.172.140.252", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95b42eec-d693-4e9c-ab1b-dc257a4a6c82", "eventTime": "2019-05-29T15:30:37Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.172.140.252", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95b42eec-d693-4e9c-ab1b-dc257a4a6c82", "record_id": "flaws_cloudtrail:0000304:95b42eec-d693-4e9c-ab1b-dc257a4a6c82", "row_index": 304, "timestamp": "2019-05-29T15:30:37Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.172.140.252", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95b42eec-d693-4e9c-ab1b-dc257a4a6c82", "eventTime": "2019-05-29T15:30:37Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.172.140.252", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2b29c21-99fd-46c0-915a-5e0c3b6c9c6e", "record_id": "flaws_cloudtrail:0000305:c2b29c21-99fd-46c0-915a-5e0c3b6c9c6e", "row_index": 305, "timestamp": "2019-05-29T15:31:19Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.172.140.252", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2b29c21-99fd-46c0-915a-5e0c3b6c9c6e", "eventTime": "2019-05-29T15:31:19Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.172.140.252", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2b29c21-99fd-46c0-915a-5e0c3b6c9c6e", "record_id": "flaws_cloudtrail:0000306:c2b29c21-99fd-46c0-915a-5e0c3b6c9c6e", "row_index": 306, "timestamp": "2019-05-29T15:31:19Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.172.140.252", "user_agent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2b29c21-99fd-46c0-915a-5e0c3b6c9c6e", "eventTime": "2019-05-29T15:31:19Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.172.140.252", "userAgent": "aws-cli/1.16.113 Python/3.7.3rc1 Linux/4.19.0-kali5-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e302719f-9a19-4b1d-a0f8-98ba833774dca", "record_id": "flaws_cloudtrail:0000307:3e302719f-9a19-4b1d-a0f8-98ba833774dca", "row_index": 307, "timestamp": "2019-05-29T15:34:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAVOG3QCXUYM2WBQ52", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1118, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e302719f-9a19-4b1d-a0f8-98ba833774dca", "eventTime": "2019-05-29T15:34:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAVOG3QCXUYM2WBQ52", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:24:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e302719f-9a19-4b1d-a0f8-98ba833774dca", "record_id": "flaws_cloudtrail:0000308:3e302719f-9a19-4b1d-a0f8-98ba833774dca", "row_index": 308, "timestamp": "2019-05-29T15:34:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAVOG3QCXUYM2WBQ52", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1118, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e302719f-9a19-4b1d-a0f8-98ba833774dca", "eventTime": "2019-05-29T15:34:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAVOG3QCXUYM2WBQ52", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:24:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fda607ff-6832-49b9-bd8a-b071d425053f", "record_id": "flaws_cloudtrail:0000309:fda607ff-6832-49b9-bd8a-b071d425053f", "row_index": 309, "timestamp": "2019-05-29T15:35:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAVOG3QCXUYM2WBQ52", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "[Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1157, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fda607ff-6832-49b9-bd8a-b071d425053f", "eventTime": "2019-05-29T15:35:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAVOG3QCXUYM2WBQ52", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:24:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fda607ff-6832-49b9-bd8a-b071d425053f", "record_id": "flaws_cloudtrail:0000310:fda607ff-6832-49b9-bd8a-b071d425053f", "row_index": 310, "timestamp": "2019-05-29T15:35:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAVOG3QCXUYM2WBQ52", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "[Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1157, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fda607ff-6832-49b9-bd8a-b071d425053f", "eventTime": "2019-05-29T15:35:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAVOG3QCXUYM2WBQ52", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:24:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "333d18c3-a58a-480c-a86b-4996f84015f7", "record_id": "flaws_cloudtrail:0000311:333d18c3-a58a-480c-a86b-4996f84015f7", "row_index": 311, "timestamp": "2019-05-29T15:36:02Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAVOG3QCXUYM2WBQ52", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1116, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "333d18c3-a58a-480c-a86b-4996f84015f7", "eventTime": "2019-05-29T15:36:02Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAVOG3QCXUYM2WBQ52", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:24:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "333d18c3-a58a-480c-a86b-4996f84015f7", "record_id": "flaws_cloudtrail:0000312:333d18c3-a58a-480c-a86b-4996f84015f7", "row_index": 312, "timestamp": "2019-05-29T15:36:02Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAVOG3QCXUYM2WBQ52", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1116, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "333d18c3-a58a-480c-a86b-4996f84015f7", "eventTime": "2019-05-29T15:36:02Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAVOG3QCXUYM2WBQ52", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:24:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e030845-cd32-4517-b699-b5a359d372fc", "record_id": "flaws_cloudtrail:0000313:e030845-cd32-4517-b699-b5a359d372fc", "row_index": 313, "timestamp": "2019-05-29T15:41:53Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "[Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1157, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e030845-cd32-4517-b699-b5a359d372fc", "eventTime": "2019-05-29T15:41:53Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e030845-cd32-4517-b699-b5a359d372fc", "record_id": "flaws_cloudtrail:0000314:e030845-cd32-4517-b699-b5a359d372fc", "row_index": 314, "timestamp": "2019-05-29T15:41:53Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "[Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1157, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e030845-cd32-4517-b699-b5a359d372fc", "eventTime": "2019-05-29T15:41:53Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[Boto3/1.9.157 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.12.157]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56c7caae-de15-4e35-892d-416de772a292", "record_id": "flaws_cloudtrail:0000315:56c7caae-de15-4e35-892d-416de772a292", "row_index": 315, "timestamp": "2019-05-29T15:47:09Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56c7caae-de15-4e35-892d-416de772a292", "eventTime": "2019-05-29T15:47:09Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56c7caae-de15-4e35-892d-416de772a292", "record_id": "flaws_cloudtrail:0000316:56c7caae-de15-4e35-892d-416de772a292", "row_index": 316, "timestamp": "2019-05-29T15:47:09Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56c7caae-de15-4e35-892d-416de772a292", "eventTime": "2019-05-29T15:47:09Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b690c56e-5833-4cb4-918c-c76f54e19cf5", "record_id": "flaws_cloudtrail:0000317:b690c56e-5833-4cb4-918c-c76f54e19cf5", "row_index": 317, "timestamp": "2019-05-29T15:47:22Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1119, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b690c56e-5833-4cb4-918c-c76f54e19cf5", "eventTime": "2019-05-29T15:47:22Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b690c56e-5833-4cb4-918c-c76f54e19cf5", "record_id": "flaws_cloudtrail:0000318:b690c56e-5833-4cb4-918c-c76f54e19cf5", "row_index": 318, "timestamp": "2019-05-29T15:47:22Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1119, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b690c56e-5833-4cb4-918c-c76f54e19cf5", "eventTime": "2019-05-29T15:47:22Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2735e50a-c542-4d27-a8f5-437685f0187", "record_id": "flaws_cloudtrail:0000319:2735e50a-c542-4d27-a8f5-437685f0187", "row_index": 319, "timestamp": "2019-05-29T15:47:32Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1169, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2735e50a-c542-4d27-a8f5-437685f0187", "eventTime": "2019-05-29T15:47:32Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2735e50a-c542-4d27-a8f5-437685f0187", "record_id": "flaws_cloudtrail:0000320:2735e50a-c542-4d27-a8f5-437685f0187", "row_index": 320, "timestamp": "2019-05-29T15:47:32Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "[aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1169, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2735e50a-c542-4d27-a8f5-437685f0187", "eventTime": "2019-05-29T15:47:32Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "[aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5cc73e0-3fd5-40ff-8796-5ced4934a05b", "record_id": "flaws_cloudtrail:0000321:d5cc73e0-3fd5-40ff-8796-5ced4934a05b", "row_index": 321, "timestamp": "2019-05-29T15:55:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1187, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5cc73e0-3fd5-40ff-8796-5ced4934a05b", "eventTime": "2019-05-29T15:55:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "responseElements": {"userId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5cc73e0-3fd5-40ff-8796-5ced4934a05b", "record_id": "flaws_cloudtrail:0000322:d5cc73e0-3fd5-40ff-8796-5ced4934a05b", "row_index": 322, "timestamp": "2019-05-29T15:55:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1187, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5cc73e0-3fd5-40ff-8796-5ced4934a05b", "eventTime": "2019-05-29T15:55:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "responseElements": {"userId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60f8ffcc-c6d2-45db-b983-47cfa5943c94", "record_id": "flaws_cloudtrail:0000323:60f8ffcc-c6d2-45db-b983-47cfa5943c94", "row_index": 323, "timestamp": "2019-05-29T15:56:19Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1193, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60f8ffcc-c6d2-45db-b983-47cfa5943c94", "eventTime": "2019-05-29T15:56:19Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60f8ffcc-c6d2-45db-b983-47cfa5943c94", "record_id": "flaws_cloudtrail:0000324:60f8ffcc-c6d2-45db-b983-47cfa5943c94", "row_index": 324, "timestamp": "2019-05-29T15:56:19Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1193, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60f8ffcc-c6d2-45db-b983-47cfa5943c94", "eventTime": "2019-05-29T15:56:19Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f8d5075-19ad-43aa-92a2-150879a89ad0", "record_id": "flaws_cloudtrail:0000325:2f8d5075-19ad-43aa-92a2-150879a89ad0", "row_index": 325, "timestamp": "2019-05-29T15:57:36Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1161, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f8d5075-19ad-43aa-92a2-150879a89ad0", "eventTime": "2019-05-29T15:57:36Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ace95ef-9070-4f6c-9e9b-069c4609469f", "record_id": "flaws_cloudtrail:0000326:4ace95ef-9070-4f6c-9e9b-069c4609469f", "row_index": 326, "timestamp": "2019-05-29T15:57:36Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1177, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ace95ef-9070-4f6c-9e9b-069c4609469f", "eventTime": "2019-05-29T15:57:36Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f8d5075-19ad-43aa-92a2-150879a89ad0", "record_id": "flaws_cloudtrail:0000327:2f8d5075-19ad-43aa-92a2-150879a89ad0", "row_index": 327, "timestamp": "2019-05-29T15:57:36Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1161, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f8d5075-19ad-43aa-92a2-150879a89ad0", "eventTime": "2019-05-29T15:57:36Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ace95ef-9070-4f6c-9e9b-069c4609469f", "record_id": "flaws_cloudtrail:0000328:4ace95ef-9070-4f6c-9e9b-069c4609469f", "row_index": 328, "timestamp": "2019-05-29T15:57:36Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1177, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ace95ef-9070-4f6c-9e9b-069c4609469f", "eventTime": "2019-05-29T15:57:36Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "247aca8d-2221-479d-ac77-f20be422ade4", "record_id": "flaws_cloudtrail:0000329:247aca8d-2221-479d-ac77-f20be422ade4", "row_index": 329, "timestamp": "2019-05-29T15:57:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "247aca8d-2221-479d-ac77-f20be422ade4", "eventTime": "2019-05-29T15:57:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8be0f569-e223-4dbf-8b2c-7dcf31022abf", "record_id": "flaws_cloudtrail:0000330:8be0f569-e223-4dbf-8b2c-7dcf31022abf", "row_index": 330, "timestamp": "2019-05-29T15:57:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1165, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8be0f569-e223-4dbf-8b2c-7dcf31022abf", "eventTime": "2019-05-29T15:57:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40fcd5e8-e389-46c7-9604-aff7162ee3b4", "record_id": "flaws_cloudtrail:0000331:40fcd5e8-e389-46c7-9604-aff7162ee3b4", "row_index": 331, "timestamp": "2019-05-29T15:57:37Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1140, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40fcd5e8-e389-46c7-9604-aff7162ee3b4", "eventTime": "2019-05-29T15:57:37Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "247aca8d-2221-479d-ac77-f20be422ade4", "record_id": "flaws_cloudtrail:0000332:247aca8d-2221-479d-ac77-f20be422ade4", "row_index": 332, "timestamp": "2019-05-29T15:57:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "247aca8d-2221-479d-ac77-f20be422ade4", "eventTime": "2019-05-29T15:57:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8be0f569-e223-4dbf-8b2c-7dcf31022abf", "record_id": "flaws_cloudtrail:0000333:8be0f569-e223-4dbf-8b2c-7dcf31022abf", "row_index": 333, "timestamp": "2019-05-29T15:57:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1165, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8be0f569-e223-4dbf-8b2c-7dcf31022abf", "eventTime": "2019-05-29T15:57:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40fcd5e8-e389-46c7-9604-aff7162ee3b4", "record_id": "flaws_cloudtrail:0000334:40fcd5e8-e389-46c7-9604-aff7162ee3b4", "row_index": 334, "timestamp": "2019-05-29T15:57:37Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1140, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40fcd5e8-e389-46c7-9604-aff7162ee3b4", "eventTime": "2019-05-29T15:57:37Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ea9d498-fa6e-41ab-9abc-7779b3a57efb", "record_id": "flaws_cloudtrail:0000335:5ea9d498-fa6e-41ab-9abc-7779b3a57efb", "row_index": 335, "timestamp": "2019-05-29T15:57:38Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ea9d498-fa6e-41ab-9abc-7779b3a57efb", "eventTime": "2019-05-29T15:57:38Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ef0d6ef-6c9f-4a45-857e-24def3b433f1", "record_id": "flaws_cloudtrail:0000336:9ef0d6ef-6c9f-4a45-857e-24def3b433f1", "row_index": 336, "timestamp": "2019-05-29T15:57:38Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ef0d6ef-6c9f-4a45-857e-24def3b433f1", "eventTime": "2019-05-29T15:57:38Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca2ce350-7e3b-4f80-9681-38ddc25c1576", "record_id": "flaws_cloudtrail:0000337:ca2ce350-7e3b-4f80-9681-38ddc25c1576", "row_index": 337, "timestamp": "2019-05-29T15:57:38Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1161, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca2ce350-7e3b-4f80-9681-38ddc25c1576", "eventTime": "2019-05-29T15:57:38Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ea9d498-fa6e-41ab-9abc-7779b3a57efb", "record_id": "flaws_cloudtrail:0000338:5ea9d498-fa6e-41ab-9abc-7779b3a57efb", "row_index": 338, "timestamp": "2019-05-29T15:57:38Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ea9d498-fa6e-41ab-9abc-7779b3a57efb", "eventTime": "2019-05-29T15:57:38Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ef0d6ef-6c9f-4a45-857e-24def3b433f1", "record_id": "flaws_cloudtrail:0000339:9ef0d6ef-6c9f-4a45-857e-24def3b433f1", "row_index": 339, "timestamp": "2019-05-29T15:57:38Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ef0d6ef-6c9f-4a45-857e-24def3b433f1", "eventTime": "2019-05-29T15:57:38Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca2ce350-7e3b-4f80-9681-38ddc25c1576", "record_id": "flaws_cloudtrail:0000340:ca2ce350-7e3b-4f80-9681-38ddc25c1576", "row_index": 340, "timestamp": "2019-05-29T15:57:38Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAEHB21VFHD5LPFJKP", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1161, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca2ce350-7e3b-4f80-9681-38ddc25c1576", "eventTime": "2019-05-29T15:57:38Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAEHB21VFHD5LPFJKP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T15:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4a2aa46-cfd7-43a5-ac9f-88b0d2c5dd67", "record_id": "flaws_cloudtrail:0000341:c4a2aa46-cfd7-43a5-ac9f-88b0d2c5dd67", "row_index": 341, "timestamp": "2019-05-29T15:58:16Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4a2aa46-cfd7-43a5-ac9f-88b0d2c5dd67", "eventTime": "2019-05-29T15:58:16Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e723563-64ec-4422-b80c-6369498ddf60", "record_id": "flaws_cloudtrail:0000342:3e723563-64ec-4422-b80c-6369498ddf60", "row_index": 342, "timestamp": "2019-05-29T15:58:16Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1116, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e723563-64ec-4422-b80c-6369498ddf60", "eventTime": "2019-05-29T15:58:16Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96463dbc-d5ec-4cd8-b298-8e58a1b65978", "record_id": "flaws_cloudtrail:0000343:96463dbc-d5ec-4cd8-b298-8e58a1b65978", "row_index": 343, "timestamp": "2019-05-29T15:58:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96463dbc-d5ec-4cd8-b298-8e58a1b65978", "eventTime": "2019-05-29T15:58:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "225c5ebe-a0b6-41ca-ace9-6db88c18ec9e", "record_id": "flaws_cloudtrail:0000344:225c5ebe-a0b6-41ca-ace9-6db88c18ec9e", "row_index": 344, "timestamp": "2019-05-29T15:58:16Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1116, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "225c5ebe-a0b6-41ca-ace9-6db88c18ec9e", "eventTime": "2019-05-29T15:58:16Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67e38f7d-8551-446e-a5b9-f3be912866e6", "record_id": "flaws_cloudtrail:0000345:67e38f7d-8551-446e-a5b9-f3be912866e6", "row_index": 345, "timestamp": "2019-05-29T15:58:16Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67e38f7d-8551-446e-a5b9-f3be912866e6", "eventTime": "2019-05-29T15:58:16Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "225c5ebe-a0b6-41ca-ace9-6db88c18ec9e", "record_id": "flaws_cloudtrail:0000346:225c5ebe-a0b6-41ca-ace9-6db88c18ec9e", "row_index": 346, "timestamp": "2019-05-29T15:58:16Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1116, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "225c5ebe-a0b6-41ca-ace9-6db88c18ec9e", "eventTime": "2019-05-29T15:58:16Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67e38f7d-8551-446e-a5b9-f3be912866e6", "record_id": "flaws_cloudtrail:0000347:67e38f7d-8551-446e-a5b9-f3be912866e6", "row_index": 347, "timestamp": "2019-05-29T15:58:16Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67e38f7d-8551-446e-a5b9-f3be912866e6", "eventTime": "2019-05-29T15:58:16Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4a2aa46-cfd7-43a5-ac9f-88b0d2c5dd67", "record_id": "flaws_cloudtrail:0000348:c4a2aa46-cfd7-43a5-ac9f-88b0d2c5dd67", "row_index": 348, "timestamp": "2019-05-29T15:58:16Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4a2aa46-cfd7-43a5-ac9f-88b0d2c5dd67", "eventTime": "2019-05-29T15:58:16Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e723563-64ec-4422-b80c-6369498ddf60", "record_id": "flaws_cloudtrail:0000349:3e723563-64ec-4422-b80c-6369498ddf60", "row_index": 349, "timestamp": "2019-05-29T15:58:16Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1116, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e723563-64ec-4422-b80c-6369498ddf60", "eventTime": "2019-05-29T15:58:16Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96463dbc-d5ec-4cd8-b298-8e58a1b65978", "record_id": "flaws_cloudtrail:0000350:96463dbc-d5ec-4cd8-b298-8e58a1b65978", "row_index": 350, "timestamp": "2019-05-29T15:58:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96463dbc-d5ec-4cd8-b298-8e58a1b65978", "eventTime": "2019-05-29T15:58:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbd06f79-f3e0-486a-bc0d-dc12e5c25b2e", "record_id": "flaws_cloudtrail:0000351:bbd06f79-f3e0-486a-bc0d-dc12e5c25b2e", "row_index": 351, "timestamp": "2019-05-29T15:58:17Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbd06f79-f3e0-486a-bc0d-dc12e5c25b2e", "eventTime": "2019-05-29T15:58:17Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10a22707-e32c-4c67-a68f-50b4e145d5fc", "record_id": "flaws_cloudtrail:0000352:10a22707-e32c-4c67-a68f-50b4e145d5fc", "row_index": 352, "timestamp": "2019-05-29T15:58:17Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10a22707-e32c-4c67-a68f-50b4e145d5fc", "eventTime": "2019-05-29T15:58:17Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbd06f79-f3e0-486a-bc0d-dc12e5c25b2e", "record_id": "flaws_cloudtrail:0000353:bbd06f79-f3e0-486a-bc0d-dc12e5c25b2e", "row_index": 353, "timestamp": "2019-05-29T15:58:17Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbd06f79-f3e0-486a-bc0d-dc12e5c25b2e", "eventTime": "2019-05-29T15:58:17Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10a22707-e32c-4c67-a68f-50b4e145d5fc", "record_id": "flaws_cloudtrail:0000354:10a22707-e32c-4c67-a68f-50b4e145d5fc", "row_index": 354, "timestamp": "2019-05-29T15:58:17Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10a22707-e32c-4c67-a68f-50b4e145d5fc", "eventTime": "2019-05-29T15:58:17Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "671f0d82-fa9c-4d5b-8d77-9c2aae26775", "record_id": "flaws_cloudtrail:0000355:671f0d82-fa9c-4d5b-8d77-9c2aae26775", "row_index": 355, "timestamp": "2019-05-29T15:58:18Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "671f0d82-fa9c-4d5b-8d77-9c2aae26775", "eventTime": "2019-05-29T15:58:18Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "671f0d82-fa9c-4d5b-8d77-9c2aae26775", "record_id": "flaws_cloudtrail:0000356:671f0d82-fa9c-4d5b-8d77-9c2aae26775", "row_index": 356, "timestamp": "2019-05-29T15:58:18Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARBZ3HPJGLN58BLHX", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "671f0d82-fa9c-4d5b-8d77-9c2aae26775", "eventTime": "2019-05-29T15:58:18Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARBZ3HPJGLN58BLHX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T14:24:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eaa12ed5-902c-4e10-957f-a98f52e32a2c", "record_id": "flaws_cloudtrail:0000357:eaa12ed5-902c-4e10-957f-a98f52e32a2c", "row_index": 357, "timestamp": "2019-05-29T16:24:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eaa12ed5-902c-4e10-957f-a98f52e32a2c", "eventTime": "2019-05-29T16:24:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHQ9T6PSOPRLSMYNY", "expiration": "May 29, 2019 10:25:46 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eaa12ed5-902c-4e10-957f-a98f52e32a2c", "record_id": "flaws_cloudtrail:0000358:eaa12ed5-902c-4e10-957f-a98f52e32a2c", "row_index": 358, "timestamp": "2019-05-29T16:24:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eaa12ed5-902c-4e10-957f-a98f52e32a2c", "eventTime": "2019-05-29T16:24:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHQ9T6PSOPRLSMYNY", "expiration": "May 29, 2019 10:25:46 PM", "sessionToken": "AgoJb3JpZ2luX2VjEEkaCXVzLXdlc3QtMiJHMEUCIQDSa1w6ZDoJFns9y/O5wdCfm+uCalHiiLtGSuFd9o713AIgD5y/Ld+qcHJImhKR8RNuwxQqqsb+3QkvBHh6xQnlRmMq2gMIYhAAGgw5NzU0MjYyNjIwMjkiDJExQ95LsYB/OzE51iq3AwqD16iMHWmAObT/RC1hvtxNoUW6HD34lR4Tnbr3K9Egdma1hfoUe6Cr6AKqpH82KUgwaC5kKs8PvVAIsEC4+xsU0KiRYtCqNj7Pn8SLNqYyy39aX4CKsmG6+3juqL9nXBM3Gqt5TABmPVuV6SjyeVvrAS1Rgq4+1VR/tRPgpsvNp8A5tu9eZrM+Livq7wx0id54CDZFcbdMS0fbp+9b1IP8TneMJD3lsd5IN22pYrcqpQMTc0dhNIoVnh82J12mA7eaI4wQqIfEV4/xTD86+J8B5TpO6HziDEtxbm+8zQSORq93unGl94IF1d9PSCliOsjjpufg+GtvK5Cx1NklCpATWFYSG1Wzh3W0TvzFEfWeUm6V0dKGe9EQujyzFfgE6Ka+ByrShEDB45uyNeaox14XVJz18J/7RqXyLNIM4t5w74bSqepratBx6weSm9k0HsDRjKF6vH3XZ+ogycDq9uW3ZEe4MyesXNgbXadC1OPo72VLKp0pFP3MMZZO5qCPXul2Kk54ZcDzRxFXeKaIBcw+mJi+/9YQspobWhb7HlxnpQMpXTm6/82uXezrKDaCg8q6gzzAlgkwwOS65wU6tAFwPYgzAi7Kyt0zLVJqIDENpZYnQkgrdGjLW8QjJy+tXHhfIk/rb+6toolhhLXk/dRrJ4tbtLjIbdwLZSXK2afywWctyhJJqxbj/NTIkqVIVmm4baPSJGfB9VrawrnfTg7uf6ATVcNZcDXUg9LhVd6LyH4O0Lj14pUsxEZZsOjuLc0XcI568TyO/HVVdmCmyWhrx9TW01AS4NxDaTXKtSRaI47SDFaKgyyESXiYd7sSeWmnorI="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "568567ba-e609-4e7a-a260-f06db5ff572e", "record_id": "flaws_cloudtrail:0000359:568567ba-e609-4e7a-a260-f06db5ff572e", "row_index": 359, "timestamp": "2019-05-29T17:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "568567ba-e609-4e7a-a260-f06db5ff572e", "eventTime": "2019-05-29T17:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAA1Z3JGJGNFELU3NU", "expiration": "May 29, 2019 11:39:41 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "568567ba-e609-4e7a-a260-f06db5ff572e", "record_id": "flaws_cloudtrail:0000360:568567ba-e609-4e7a-a260-f06db5ff572e", "row_index": 360, "timestamp": "2019-05-29T17:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "568567ba-e609-4e7a-a260-f06db5ff572e", "eventTime": "2019-05-29T17:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAA1Z3JGJGNFELU3NU", "expiration": "May 29, 2019 11:39:41 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0d2b1fd-e8cb-47d5-8640-b19afa5fbd9f", "record_id": "flaws_cloudtrail:0000361:a0d2b1fd-e8cb-47d5-8640-b19afa5fbd9f", "row_index": 361, "timestamp": "2019-05-29T18:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1868, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0d2b1fd-e8cb-47d5-8640-b19afa5fbd9f", "eventTime": "2019-05-29T18:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3WF3OYBITFT336AA", "expiration": "May 30, 2019 12:53:37 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0d2b1fd-e8cb-47d5-8640-b19afa5fbd9f", "record_id": "flaws_cloudtrail:0000362:a0d2b1fd-e8cb-47d5-8640-b19afa5fbd9f", "row_index": 362, "timestamp": "2019-05-29T18:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1868, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0d2b1fd-e8cb-47d5-8640-b19afa5fbd9f", "eventTime": "2019-05-29T18:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3WF3OYBITFT336AA", "expiration": "May 30, 2019 12:53:37 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "489899c-dc99-4d72-b275-2b2a83658f4a", "record_id": "flaws_cloudtrail:0000363:489899c-dc99-4d72-b275-2b2a83658f4a", "row_index": 363, "timestamp": "2019-05-29T18:25:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "489899c-dc99-4d72-b275-2b2a83658f4a", "eventTime": "2019-05-29T18:25:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIANNVT121C35A428CF", "expiration": "May 29, 2019 7:25:38 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "489899c-dc99-4d72-b275-2b2a83658f4a", "record_id": "flaws_cloudtrail:0000364:489899c-dc99-4d72-b275-2b2a83658f4a", "row_index": 364, "timestamp": "2019-05-29T18:25:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "489899c-dc99-4d72-b275-2b2a83658f4a", "eventTime": "2019-05-29T18:25:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIANNVT121C35A428CF", "expiration": "May 29, 2019 7:25:38 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ebb6c55-ce8e-40d2-8ee6-d455a57e29d6", "record_id": "flaws_cloudtrail:0000365:9ebb6c55-ce8e-40d2-8ee6-d455a57e29d6", "row_index": 365, "timestamp": "2019-05-29T19:02:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1606, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ebb6c55-ce8e-40d2-8ee6-d455a57e29d6", "eventTime": "2019-05-29T19:02:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIASHRGKC3I1U3CZ8XW", "expiration": "May 30, 2019 7:02:11 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69ec5023-6868-4db4-a07c-cdad56220890", "record_id": "flaws_cloudtrail:0000366:69ec5023-6868-4db4-a07c-cdad56220890", "row_index": 366, "timestamp": "2019-05-29T19:02:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1604, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69ec5023-6868-4db4-a07c-cdad56220890", "eventTime": "2019-05-29T19:02:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKZAKI8VEUBK2J9NY", "expiration": "May 30, 2019 7:02:11 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56f1eda7-91a5-4998-8394-f848470", "record_id": "flaws_cloudtrail:0000367:56f1eda7-91a5-4998-8394-f848470", "row_index": 367, "timestamp": "2019-05-29T19:02:11Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAKZAKI8VEUBK2J9NY", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "255.212.7.12", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56f1eda7-91a5-4998-8394-f848470", "eventTime": "2019-05-29T19:02:11Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.212.7.12", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAKZAKI8VEUBK2J9NY", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T19:02:11Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/05/29/[$LATEST]70ef5bc67b30d01f8a0527da6dd7f982", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ebb6c55-ce8e-40d2-8ee6-d455a57e29d6", "record_id": "flaws_cloudtrail:0000368:9ebb6c55-ce8e-40d2-8ee6-d455a57e29d6", "row_index": 368, "timestamp": "2019-05-29T19:02:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1606, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ebb6c55-ce8e-40d2-8ee6-d455a57e29d6", "eventTime": "2019-05-29T19:02:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIASHRGKC3I1U3CZ8XW", "expiration": "May 30, 2019 7:02:11 AM", "sessionToken": "AgoJb3JpZ2luX2VjEEsaCXVzLXdlc3QtMiJHMEUCIQDMy0o/WMULmLfif15n37rzI4WFSUGGC41JymxRkQ1SOgIgJWUDLMfQIovXjazzQizMmtKO8z3QmXq+w0oJRhHro9gqggIIZBAAGgw5NzU0MjYyNjIwMjkiDLHe8M1X3F3CAZRRairfAcN6KDk15zHh9MxrWnsvlhj1NdwfhJZACh4UIGa4vZIyJgcKVFAO505IUPgwiOzPxqTM5PuF/nMw4IjySPCRr+KZt8k3Vy0YNKl/+7p7G7ZtMXoBp9HdKFPaaJ6gXoSrCEt+H/6DdOFPJxDP7ipnW+p0awbIrhaHAh0yY/3Ezj6cU8WYfv7RKGND0A54PECJjycFIE2hkDHtSEg3Ci+HFR+haHe5ZIhnJgRgXS9WRRNJ/udHffVYramDDJqATapU/BdPTE6s5rai5ZmfPDqXVqMhki3wzBmmQt0SYOA67Kows6675wU6tAFe1eXGHo8LHLgwWFUnu6cGVmbER7pkv13k1EuG9qFZEal47waPg2Uc2SdJvpofY+ibSPoW/r7PvT/SIK/v6FHjwShcRZ8duwT6qqFUJFSo6TRallx8rpEivkHhTumLk6ISLaA55P1nn2SRLFRQkemnPeixufLHdUIcyYUzrxjakXGb1GHqrEcGEZPMkNjLoNu/mTZcBCjRTL8KP8ys3aOD/4ZkJkCi8KGwMl1HJmIxfZZYSM8="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69ec5023-6868-4db4-a07c-cdad56220890", "record_id": "flaws_cloudtrail:0000369:69ec5023-6868-4db4-a07c-cdad56220890", "row_index": 369, "timestamp": "2019-05-29T19:02:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1604, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69ec5023-6868-4db4-a07c-cdad56220890", "eventTime": "2019-05-29T19:02:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKZAKI8VEUBK2J9NY", "expiration": "May 30, 2019 7:02:11 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56f1eda7-91a5-4998-8394-f848470", "record_id": "flaws_cloudtrail:0000370:56f1eda7-91a5-4998-8394-f848470", "row_index": 370, "timestamp": "2019-05-29T19:02:11Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAKZAKI8VEUBK2J9NY", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "255.212.7.12", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56f1eda7-91a5-4998-8394-f848470", "eventTime": "2019-05-29T19:02:11Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.212.7.12", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAKZAKI8VEUBK2J9NY", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-29T19:02:11Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/05/29/[$LATEST]70ef5bc67b30d01f8a0527da6dd7f982", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d180027d2-1356-484b-b456-996dfe4c6907", "record_id": "flaws_cloudtrail:0000371:d180027d2-1356-484b-b456-996dfe4c6907", "row_index": 371, "timestamp": "2019-05-29T19:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d180027d2-1356-484b-b456-996dfe4c6907", "eventTime": "2019-05-29T19:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALTSQIRZECSXVMD5M", "expiration": "May 30, 2019 1:42:53 AM", "sessionToken": "AgoJb3JpZ2luX2VjEEwaCXVzLXdlc3QtMiJHMEUCIHLv3YLVG18fqGAze53GCl/Y9skHQrw1U6UcGpnBdMAdAiEAsYOCwSOv2BbcobQ8aJ5pUxXd+sf9+dPRHqaGhoQVFoIq2gMIZRAAGgw5NzU0MjYyNjIwMjkiDPr4N/EOtVZU681f1iq3A1LEq6sraaq6DT5cLyMHUZ0xU1Nvb+LBtUkpNwu6XQ82E4PpvzN4xB+MGpqmyl/gdnyPv9YBNfAPhVUzZQdScjjKvMOZIeTgR2vlHa4p4J1MFm2EiBsrY/eW5uJ1OVWnM1pnX8E/ni2hVpkaP8MOGrFmFSzwbBeEUSKDV9zV6D+/3jV5udE8GU2Zd0LW1Zl2qpYrmbwkAphLED1rwEkKjdBPdgEK4ui8r1+WWEZawz+6TheQDePL8ytN2a4B749ReU2qMTjrfzNwqA5AcW+uE3xOrrdPadP2b9mPoCG1uLy0LScbEKCc7/GEFfoTNQsSZ6wallutgqz4zhq8asgZPxMbXyeI5uvlcUAhbi7VCae4SNg+60BVDkg7Nsq0ieo2ze4m3VGHp4ONrroxlq6WxB7fPnUWlvwiSPzD+HlM8nx54qO9IMTy2k2lbX/S7MQcUdJY3gJgjapF2V0R/PaiMZEERUrXInTF8Ru+hQGKDm92N8BfczCgEJhvuHhPD4barsZs+SQQPfwnsehv8hdSfF0wrhoUG4mtIOzIdYYUAQR/fuosgyYZmv0dKn1Bhpo3nYQqRfBqxUMw8bi75wU6tAGQdELVur85MYg7rTC/kV1N3TpiIYT2x6m9ruLUzCB7jH2n9vtBZm1ZLkBgj1Q6yErk0ypR+iwOBI/C7KMXn6vOZXOYVBRViTvsRmRlMZixgHl2L+Q/rUcXfQp29ABWx08CfDHvgHAQE7qsJeRg3nvUcUkjQwGEOa8M0uz0o1W+pSmOFRJ06s30VB40YvooBDcEvIwSABtpQznPeir+eb5IetITl+0Wrr+sSXO4rZU6ykV+to0="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d180027d2-1356-484b-b456-996dfe4c6907", "record_id": "flaws_cloudtrail:0000372:d180027d2-1356-484b-b456-996dfe4c6907", "row_index": 372, "timestamp": "2019-05-29T19:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d180027d2-1356-484b-b456-996dfe4c6907", "eventTime": "2019-05-29T19:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALTSQIRZECSXVMD5M", "expiration": "May 30, 2019 1:42:53 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69cdef48-c218-42f0-a208-ab7e8578d10d", "record_id": "flaws_cloudtrail:0000373:69cdef48-c218-42f0-a208-ab7e8578d10d", "row_index": 373, "timestamp": "2019-05-29T19:29:03Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIARUWS7H3MHFK5T1M2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "16.45.174.98", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69cdef48-c218-42f0-a208-ab7e8578d10d", "eventTime": "2019-05-29T19:29:03Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "16.45.174.98", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIARUWS7H3MHFK5T1M2", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ae3c27c-a4a4-48c6-a5a0-c518e7e37f4f", "record_id": "flaws_cloudtrail:0000374:3ae3c27c-a4a4-48c6-a5a0-c518e7e37f4f", "row_index": 374, "timestamp": "2019-05-29T19:29:39Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIARUWS7H3MHFK5T1M2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "16.45.174.98", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 572, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ae3c27c-a4a4-48c6-a5a0-c518e7e37f4f", "eventTime": "2019-05-29T19:29:39Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "16.45.174.98", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIARUWS7H3MHFK5T1M2", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53544a7e-d3d9-4c5f-a74a-19082778d989", "record_id": "flaws_cloudtrail:0000375:53544a7e-d3d9-4c5f-a74a-19082778d989", "row_index": 375, "timestamp": "2019-05-29T19:32:17Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIARUWS7H3MHFK5T1M2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "16.45.174.98", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 592, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53544a7e-d3d9-4c5f-a74a-19082778d989", "eventTime": "2019-05-29T19:32:17Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "16.45.174.98", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIARUWS7H3MHFK5T1M2", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17fe7eeb-ae30-46c9-8413-d416c8638b7a", "record_id": "flaws_cloudtrail:0000376:17fe7eeb-ae30-46c9-8413-d416c8638b7a", "row_index": 376, "timestamp": "2019-05-29T19:33:39Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIARUWS7H3MHFK5T1M2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "16.45.174.98", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 575, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17fe7eeb-ae30-46c9-8413-d416c8638b7a", "eventTime": "2019-05-29T19:33:39Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "16.45.174.98", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIARUWS7H3MHFK5T1M2", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fcbd21d-a737-4254-90eb-e86880c6019e", "record_id": "flaws_cloudtrail:0000377:6fcbd21d-a737-4254-90eb-e86880c6019e", "row_index": 377, "timestamp": "2019-05-29T19:39:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIARUWS7H3MHFK5T1M2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "16.45.174.98", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/Level6-elevated-33"], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fcbd21d-a737-4254-90eb-e86880c6019e", "eventTime": "2019-05-29T19:39:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "16.45.174.98", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIARUWS7H3MHFK5T1M2", "userName": "Level6"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/Level6-elevated-33", "roleSessionName": "Level6-session"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/Level6-elevated-33"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe6b3ac3-7bb3-40ab-af42-68e41d6e4872", "record_id": "flaws_cloudtrail:0000378:fe6b3ac3-7bb3-40ab-af42-68e41d6e4872", "row_index": 378, "timestamp": "2019-05-29T19:40:03Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIARUWS7H3MHFK5T1M2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "16.45.174.98", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-8937"], "raw_record_size_bytes": 662, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe6b3ac3-7bb3-40ab-af42-68e41d6e4872", "eventTime": "2019-05-29T19:40:03Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "16.45.174.98", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIARUWS7H3MHFK5T1M2", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-8937", "key": "reports/217.csv"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8937"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25dad6f7-2578-43bb-a5df-80d36d9ef9b3", "record_id": "flaws_cloudtrail:0000379:25dad6f7-2578-43bb-a5df-80d36d9ef9b3", "row_index": 379, "timestamp": "2019-05-29T20:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25dad6f7-2578-43bb-a5df-80d36d9ef9b3", "eventTime": "2019-05-29T20:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAD4YU1D4K4HR5IVEX", "expiration": "May 30, 2019 2:27:21 AM", "sessionToken": "AgoJb3JpZ2luX2VjEE0aCXVzLXdlc3QtMiJIMEYCIQCLGcWy4LtJs40UlQpMIPerHDi13BIgks4cFtlsZlmZ8gIhANvH8vepjWrQYz52XNlQVFaApLGcAmpkfWBtcTSJq/TZKtoDCGYQABoMOTc1NDI2MjYyMDI5IgxVbMUdwh9Zkj4kBnkqtwPtQsmn/bvUwXlORQO9k0YVeOPSpbRNC+UrkT/BaQ4ISYkUH+JaK4No6RReIe9B6CR14h+PFxfeRRC8TeYLM/2fBL38BCcBgB6lqYpp7T/mF6sMgv26kmb+sg8Vb3dMiZlaLzhYmg+eikH+utVyFYuGsQSAmykFOkz0BuXFKnmnwtRINSv74glbpz4A/CKis8nLjYc/v1zjrptuRqQnT2WvqK8tAXrbNoNpI5sQbXHFlsLAVNTaQIC8uEJQ8MOc5foelYwsOj+N49IjMVTwn2TOPwoQbgZSXNMzGwkxmRb0XXdFZHcIW5XleBQUN8oTs3q3ApO/OF6cmfo1pyPph0GKS2CFsLosSE18upGhB0i4aDlz7c8ixI8J6V7Wa51QamYRcQSex2KtNGrFmCAyMe+OY3H19ahcdOhZ91CkkX48i2pLzCSGy/wf4krfAgt/9kIizV38+E1bnqHRsq2YAoq20kNtqcl9WkP0tEMjvOFU+vS7+cEcWpiBvsSW+rv42HBL/55q/ydMCikqeGKwEZAMtOv4EWS7oU/K3jvnhLAhwK/QJs+exHRD0gmrxk79NLB94yYs1inyMIHVu+cFOrMBXPcRtLyavQHr9yvy5hcvGC2JWXE5NUlbUnKg2NvxzJloBFei6jp+nRANGVRps4rU9Z+VZVjgV0MbSx/TgcxeaXrQ4sQ7QGnlc/f0NWHpV+gUuYwZFJL4TbYlrXdJ6y7Am51I/h48uX/zw8hnAl2VXamjelq5AtI07aflzJczkPyJ/AdV+39PnmFVSROig7IyVFKXTVPZq7ww/LnXYfrw0aTys0GQ9amm75bbi0poUpjVzQc="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25dad6f7-2578-43bb-a5df-80d36d9ef9b3", "record_id": "flaws_cloudtrail:0000380:25dad6f7-2578-43bb-a5df-80d36d9ef9b3", "row_index": 380, "timestamp": "2019-05-29T20:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25dad6f7-2578-43bb-a5df-80d36d9ef9b3", "eventTime": "2019-05-29T20:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAD4YU1D4K4HR5IVEX", "expiration": "May 30, 2019 2:27:21 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ea7392f-bdae-4d8c-b13b-700ad38b93f7", "record_id": "flaws_cloudtrail:0000381:6ea7392f-bdae-4d8c-b13b-700ad38b93f7", "row_index": 381, "timestamp": "2019-05-29T21:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ea7392f-bdae-4d8c-b13b-700ad38b93f7", "eventTime": "2019-05-29T21:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABGGK4EKUMB7XHPKU", "expiration": "May 30, 2019 3:27:43 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ea7392f-bdae-4d8c-b13b-700ad38b93f7", "record_id": "flaws_cloudtrail:0000382:6ea7392f-bdae-4d8c-b13b-700ad38b93f7", "row_index": 382, "timestamp": "2019-05-29T21:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ea7392f-bdae-4d8c-b13b-700ad38b93f7", "eventTime": "2019-05-29T21:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABGGK4EKUMB7XHPKU", "expiration": "May 30, 2019 3:27:43 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "528be7eb-5e07-4070-a26c-a271ef3cbefb", "record_id": "flaws_cloudtrail:0000383:528be7eb-5e07-4070-a26c-a271ef3cbefb", "row_index": 383, "timestamp": "2019-05-29T22:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "528be7eb-5e07-4070-a26c-a271ef3cbefb", "eventTime": "2019-05-29T22:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEZJ5AXV16URYBQMC", "expiration": "May 30, 2019 4:54:28 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "528be7eb-5e07-4070-a26c-a271ef3cbefb", "record_id": "flaws_cloudtrail:0000384:528be7eb-5e07-4070-a26c-a271ef3cbefb", "row_index": 384, "timestamp": "2019-05-29T22:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "528be7eb-5e07-4070-a26c-a271ef3cbefb", "eventTime": "2019-05-29T22:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEZJ5AXV16URYBQMC", "expiration": "May 30, 2019 4:54:28 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b80e119a-8f14-4f91-9193-50b102625", "record_id": "flaws_cloudtrail:0000385:b80e119a-8f14-4f91-9193-50b102625", "row_index": 385, "timestamp": "2019-05-29T23:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1865, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b80e119a-8f14-4f91-9193-50b102625", "eventTime": "2019-05-29T23:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAH29Y9LYRVHIZS6U6", "expiration": "May 30, 2019 5:29:43 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b80e119a-8f14-4f91-9193-50b102625", "record_id": "flaws_cloudtrail:0000386:b80e119a-8f14-4f91-9193-50b102625", "row_index": 386, "timestamp": "2019-05-29T23:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1865, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b80e119a-8f14-4f91-9193-50b102625", "eventTime": "2019-05-29T23:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAH29Y9LYRVHIZS6U6", "expiration": "May 30, 2019 5:29:43 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "455bcbdb-9876-49dd-8362-d2dcd28b2bd2", "record_id": "flaws_cloudtrail:0000387:455bcbdb-9876-49dd-8362-d2dcd28b2bd2", "row_index": 387, "timestamp": "2019-05-30T00:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "455bcbdb-9876-49dd-8362-d2dcd28b2bd2", "eventTime": "2019-05-30T00:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQB2PEX2FMJ5BFZ6G", "expiration": "May 30, 2019 6:35:18 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "455bcbdb-9876-49dd-8362-d2dcd28b2bd2", "record_id": "flaws_cloudtrail:0000388:455bcbdb-9876-49dd-8362-d2dcd28b2bd2", "row_index": 388, "timestamp": "2019-05-30T00:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "455bcbdb-9876-49dd-8362-d2dcd28b2bd2", "eventTime": "2019-05-30T00:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQB2PEX2FMJ5BFZ6G", "expiration": "May 30, 2019 6:35:18 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ce6d6bd-5e97-491a-b331-6107bfff923d", "record_id": "flaws_cloudtrail:0000389:9ce6d6bd-5e97-491a-b331-6107bfff923d", "row_index": 389, "timestamp": "2019-05-30T00:25:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1933, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ce6d6bd-5e97-491a-b331-6107bfff923d", "eventTime": "2019-05-30T00:25:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWELWLTLDEGADADR9", "expiration": "May 30, 2019 1:25:13 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ce6d6bd-5e97-491a-b331-6107bfff923d", "record_id": "flaws_cloudtrail:0000390:9ce6d6bd-5e97-491a-b331-6107bfff923d", "row_index": 390, "timestamp": "2019-05-30T00:25:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1933, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ce6d6bd-5e97-491a-b331-6107bfff923d", "eventTime": "2019-05-30T00:25:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWELWLTLDEGADADR9", "expiration": "May 30, 2019 1:25:13 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c25fde6-16d5-4509-92d3-bfa3d9e839f4", "record_id": "flaws_cloudtrail:0000391:3c25fde6-16d5-4509-92d3-bfa3d9e839f4", "row_index": 391, "timestamp": "2019-05-30T01:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c25fde6-16d5-4509-92d3-bfa3d9e839f4", "eventTime": "2019-05-30T01:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALO3RUJX270S7TFDC", "expiration": "May 30, 2019 7:57:41 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c25fde6-16d5-4509-92d3-bfa3d9e839f4", "record_id": "flaws_cloudtrail:0000392:3c25fde6-16d5-4509-92d3-bfa3d9e839f4", "row_index": 392, "timestamp": "2019-05-30T01:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c25fde6-16d5-4509-92d3-bfa3d9e839f4", "eventTime": "2019-05-30T01:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALO3RUJX270S7TFDC", "expiration": "May 30, 2019 7:57:41 AM", "sessionToken": "AgoJb3JpZ2luX2VjEFIaCXVzLXdlc3QtMiJHMEUCIQCzEHNcjnRCnAuGogXaC6f15w0wM5A+pqkHRJY+Va40iwIgWs+nu14DK7TaHMe6piIIz8WIBswlEIsSXXaz3qSS4kMq2gMIaxAAGgw5NzU0MjYyNjIwMjkiDKeXhTxFPhXPkUGzpCq3A7fy7GWqXDQcmR9XJCibxPjxQDSM4TdPKUC5g2YrxLAcsKt9J/p9zqqSlQ1QyxbNVeg+CcoAmWG4rfZP31Msy4oZKJYQy44xiMmyHVw6TvIrXZsKOCEfAPCtAdlbs1CiGKihjT1I8TZ4PhETqMhmhn3xiAIG2ZnVxSSweJzeejQXk92E2yf4lnTn0LcC2avCUzy/lh+HiRhD68aaBwCFYXt5XOOiWqq8oVIbhvu9DyRme5aAYiGIbArQSS4IgDRhJHiHx/mT3Oyx0niOs6Zw/YW8MvqBDIp/rki2e1HrCbZfQKOitqnWpXqBHURNVGoknxRbsRWPi9K29E04f6nxJG4ZRWXZjVuvfUsza4iO9B5H8JnK7V2/dN/RrQSFV/mhO7Cmqa+fC8IhIxVwU4+ksv/KUynYUxFetrPKQ7+rhkRQhKiSDEof68h/aa5yIuWDUVH+G2uVNoyg1910n8IdI8uBKXQYanTrxuBwpbUjX7swzWMq5fC7rkW0Ps1v+MQg+nFGyi+qMYlQrZNgpIuzVTmzYo0MkmSOAGMPz49AzZ1fJHflyhQI+BsHSNPh3Av1gVjdkz2e9zww0eG85wU6tAGfiCJCrn+NK/eu4/wCEBmii1IQzPIeeI1Tughja5Ke34BijsTNGUfdnSN6ATBy7QSMDhm/Ke/qlDRpsGjLRY0oj3GVf4awk6TtawQlWQ/HEbBpglZGj92EfSSmJWRkzs8eaeF8S8m1lmLkBfna++GN0xxoiQ+pO/x+xAagOm+6ANcf67ST5s60Obwf6oWQNDM5ht8SgKNQ+QTGW6za7sRwsHvOEgO2ofrEBz7w/PXff/F5y0U="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1cd1316-039b-4475-9c38-49873c0c1b3d", "record_id": "flaws_cloudtrail:0000393:d1cd1316-039b-4475-9c38-49873c0c1b3d", "row_index": 393, "timestamp": "2019-05-30T02:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1cd1316-039b-4475-9c38-49873c0c1b3d", "eventTime": "2019-05-30T02:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHFYG0PE36S3E88NC", "expiration": "May 30, 2019 8:27:38 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1cd1316-039b-4475-9c38-49873c0c1b3d", "record_id": "flaws_cloudtrail:0000394:d1cd1316-039b-4475-9c38-49873c0c1b3d", "row_index": 394, "timestamp": "2019-05-30T02:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1cd1316-039b-4475-9c38-49873c0c1b3d", "eventTime": "2019-05-30T02:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHFYG0PE36S3E88NC", "expiration": "May 30, 2019 8:27:38 AM", "sessionToken": "AgoJb3JpZ2luX2VjEFMaCXVzLXdlc3QtMiJIMEYCIQDdTrMY+1eV+SMmomVU/oQy94QLPicn5gqOJDxQudyzXgIhAK4oYaiU7W/dBpQOX6C6UUh7bhtuEYG4j2sFw7rrG45bKtoDCGwQABoMOTc1NDI2MjYyMDI5IgzrS6diuqcpDPnCZf0qtwNtiZepPCCCZRKY1WVG1W2Qh1kmKQcMQbxyiCm5Cj/tX8BQj53+6nYSRe+GkVGYR1AtfatQJyqMRNHWRKwOsrX8Sb3RoUpRnkxyofxu9VZzhGFTu1U/TPEN4aJzgYXRgb9u28bdyoyCXTb+F+ZS6lbNKwpaD504+CpFM8M3gV7RimpHiRjg82ePyPCag9/nj6p7OCQuWcwfXAgafyk275zO/hti4BucpsnPqP3OTl3pStP/0IF+01TomPLSv1bZjOTNp5uCVEn03d4431Q68VJUgwitnZ9r0+QgC8gk6Xnyn9TZRXmZJHiBXflCtFR6kYHWRiSpovV2S/FvFhT5tWYWymfW6SzrSqr+QglGNWPHRsScEXYiJa9M1mnEJaXcaGXftES0XWCbU7qjjhrcFjzEZH3GsdY/cRLi3hmnR7BfpxSR8UTdLe4A4aGY4QbG+EeObhlzAAgScMMdXniIjdWCBBfOmlb7vk8ejxxs8YVTlO1sh2LaJZx0Q6yxDRBF6fzFqVCvL7OEPwsdyys6DSkFB+4dOc7mfOv746738ep9pAH0wYrZMOz/KM08zZ2KzQrrklUIATYaGMOH9vOcFOrMBNJqgW7B7oRFbL0HbdjCIaeP2Cyy5x2JnFaRcEa0kTkG1IzR38kRSPSk8Ayjh7YDOOMeCzBeNDmEZEvEEgNVI2V/xKP4Jqmw9iz6xLlalQ+HoMnUdXvM1HsKTxMcqYmmCyMCLzdDLdlfecoikL6wYtZJLz3z26PL/tzQcu+yZ8pvltmiDmPNP1qtNObpYPLiipnrPSxEdnWQxagRksfYGv8WKfE/bLl64xqcbBPhD/MZK0ZQ="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f9092fd-7bfe-41ff-9018-dacc6da6f371", "record_id": "flaws_cloudtrail:0000395:9f9092fd-7bfe-41ff-9018-dacc6da6f371", "row_index": 395, "timestamp": "2019-05-30T03:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f9092fd-7bfe-41ff-9018-dacc6da6f371", "eventTime": "2019-05-30T03:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZL1AMI76Q260L4DN", "expiration": "May 30, 2019 9:56:46 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f9092fd-7bfe-41ff-9018-dacc6da6f371", "record_id": "flaws_cloudtrail:0000396:9f9092fd-7bfe-41ff-9018-dacc6da6f371", "row_index": 396, "timestamp": "2019-05-30T03:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f9092fd-7bfe-41ff-9018-dacc6da6f371", "eventTime": "2019-05-30T03:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZL1AMI76Q260L4DN", "expiration": "May 30, 2019 9:56:46 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc8ff750-7330-4059-9056-0a8deb1bd3d3", "record_id": "flaws_cloudtrail:0000397:dc8ff750-7330-4059-9056-0a8deb1bd3d3", "row_index": 397, "timestamp": "2019-05-30T04:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc8ff750-7330-4059-9056-0a8deb1bd3d3", "eventTime": "2019-05-30T04:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIARHGRI4MIT2NZWBAH", "expiration": "May 30, 2019 10:52:13 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc8ff750-7330-4059-9056-0a8deb1bd3d3", "record_id": "flaws_cloudtrail:0000398:dc8ff750-7330-4059-9056-0a8deb1bd3d3", "row_index": 398, "timestamp": "2019-05-30T04:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc8ff750-7330-4059-9056-0a8deb1bd3d3", "eventTime": "2019-05-30T04:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIARHGRI4MIT2NZWBAH", "expiration": "May 30, 2019 10:52:13 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5db795db-1fdd-434b-96b6-639de35f461d", "record_id": "flaws_cloudtrail:0000399:5db795db-1fdd-434b-96b6-639de35f461d", "row_index": 399, "timestamp": "2019-05-30T05:24:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5db795db-1fdd-434b-96b6-639de35f461d", "eventTime": "2019-05-30T05:24:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAF3U91EJF2KEUEKMU", "expiration": "May 30, 2019 11:37:46 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5db795db-1fdd-434b-96b6-639de35f461d", "record_id": "flaws_cloudtrail:0000400:5db795db-1fdd-434b-96b6-639de35f461d", "row_index": 400, "timestamp": "2019-05-30T05:24:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5db795db-1fdd-434b-96b6-639de35f461d", "eventTime": "2019-05-30T05:24:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAF3U91EJF2KEUEKMU", "expiration": "May 30, 2019 11:37:46 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2da188b-4756-43a3-8ced-17ff0a608830", "record_id": "flaws_cloudtrail:0000401:a2da188b-4756-43a3-8ced-17ff0a608830", "row_index": 401, "timestamp": "2019-05-30T06:24:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2da188b-4756-43a3-8ced-17ff0a608830", "eventTime": "2019-05-30T06:24:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHSFV5ARAOGFXTYL9", "expiration": "May 30, 2019 7:24:25 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2da188b-4756-43a3-8ced-17ff0a608830", "record_id": "flaws_cloudtrail:0000402:a2da188b-4756-43a3-8ced-17ff0a608830", "row_index": 402, "timestamp": "2019-05-30T06:24:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2da188b-4756-43a3-8ced-17ff0a608830", "eventTime": "2019-05-30T06:24:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHSFV5ARAOGFXTYL9", "expiration": "May 30, 2019 7:24:25 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12ac0d0f-b59b-4923-b877-56da191310", "record_id": "flaws_cloudtrail:0000403:12ac0d0f-b59b-4923-b877-56da191310", "row_index": 403, "timestamp": "2019-05-30T06:24:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12ac0d0f-b59b-4923-b877-56da191310", "eventTime": "2019-05-30T06:24:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZBJJ8DAX9YIWWWI6", "expiration": "May 30, 2019 12:53:24 PM", "sessionToken": "AgoJb3JpZ2luX2VjEFcaCXVzLXdlc3QtMiJGMEQCIAajO55a8PXBT1fGrmYnWjTmzU3wfNWRrJqLE5Z35I3oAiBZcIQH0/ZivGSwyKe0Dzdpsjx99p7NJmixbpRT2D7//yraAwhwEAAaDDk3NTQyNjI2MjAyOSIMxA2MCw9BIbZX4NAgKrcDe6kKA30STV3XdfBia6gKiMirI6g4cDZNJ0iLdY8/ogLxICNZWmm29lzK5DnYHlkiNQVdI7Tw1yOKTayjVUr6Kpj2SW4Iv0AmYF9mEZ72YKS5iYaWCmp9ahFbjTvVPy7tIQnRczaJnOU1uqmBnnY11d4yYmqX2q5tkbXmB7VbReMyCJrSMY/9Eh+TjxX8BLEsM9XxyMeBNYBLhOeT2lC0GcMO3istIxnPXsaEXUANTxXH5GqQioAUjnmJXxSKrwgX6ametRqyONYxLkR9F6jGKvNQUbNjVWqEq78iHTpD7TcbJmJL1gyd7ZcAnIzuphQHXcXK/ckGo8mcUjI06izXnQ0P5kIhzhIRuDmcqYJCKPp8rdGC8Om5Y/3u+jTM5pnNn+EZyfBuwPYQwObSw+nK0pEbSP6ld30iFlk+f7MhOYAm0/7AY1Tl2gj+E0yXtGG3To9BBthliBhta6aZ8CubwmTyx1tpK4Er7KWShfckhTvLxArnc1v3w8YJa78BZfl/Yh5E9uoaoCUSnrsUGR4o0pjkLuUQN3HJjxPdWkU4T2GER7cyBC/ZM4ZBXTqpeeC2t/HszWBrwzCi7r3nBTq1ARWuIQF2rQYhRzdxEO2K2N5dCWpJiaBKAAD1E6Dt2oC3EEbpgBPcmn3hZpGgwgMcjd/fyn1rJ1CxFH//KlZbeCrKSd9SbxbpTkgPW2YZ3YEAGyZXejF+eY+/bBEdq+2dOyi8gKNYaQorrWkYDFLylA7vkCjm2/R5CtuwGk1oI8BSScDVTGbirP2W8ow+iYfbAnSSybjJoMzx3v2grVjf+6UJANRgQOFm8dZjLFwl69Q3DH+86CQ="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12ac0d0f-b59b-4923-b877-56da191310", "record_id": "flaws_cloudtrail:0000404:12ac0d0f-b59b-4923-b877-56da191310", "row_index": 404, "timestamp": "2019-05-30T06:24:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12ac0d0f-b59b-4923-b877-56da191310", "eventTime": "2019-05-30T06:24:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZBJJ8DAX9YIWWWI6", "expiration": "May 30, 2019 12:53:24 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20a2cf92-2c7f-4405-8e36-cd8c700934f", "record_id": "flaws_cloudtrail:0000405:20a2cf92-2c7f-4405-8e36-cd8c700934f", "row_index": 405, "timestamp": "2019-05-30T07:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20a2cf92-2c7f-4405-8e36-cd8c700934f", "eventTime": "2019-05-30T07:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXIMZN6ZR0CQI65X7", "expiration": "May 30, 2019 1:38:13 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20a2cf92-2c7f-4405-8e36-cd8c700934f", "record_id": "flaws_cloudtrail:0000406:20a2cf92-2c7f-4405-8e36-cd8c700934f", "row_index": 406, "timestamp": "2019-05-30T07:24:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20a2cf92-2c7f-4405-8e36-cd8c700934f", "eventTime": "2019-05-30T07:24:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXIMZN6ZR0CQI65X7", "expiration": "May 30, 2019 1:38:13 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86804c-a04e-4461-a50b-5b553ea9dc8f", "record_id": "flaws_cloudtrail:0000407:86804c-a04e-4461-a50b-5b553ea9dc8f", "row_index": 407, "timestamp": "2019-05-30T08:04:31Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 633, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86804c-a04e-4461-a50b-5b553ea9dc8f", "eventTime": "2019-05-30T08:04:31Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"pathPrefix": "/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef00dcee-9a67-4255-b071-8a5479df9f47", "record_id": "flaws_cloudtrail:0000408:ef00dcee-9a67-4255-b071-8a5479df9f47", "row_index": 408, "timestamp": "2019-05-30T08:04:31Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 643, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef00dcee-9a67-4255-b071-8a5479df9f47", "eventTime": "2019-05-30T08:04:31Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c9e9907-60e4-4ee7-87d6-39766deceb10", "record_id": "flaws_cloudtrail:0000409:3c9e9907-60e4-4ee7-87d6-39766deceb10", "row_index": 409, "timestamp": "2019-05-30T08:04:31Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 643, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c9e9907-60e4-4ee7-87d6-39766deceb10", "eventTime": "2019-05-30T08:04:31Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "536c40c0-4a60-4ab7-ab65-7011c97c1a64", "record_id": "flaws_cloudtrail:0000410:536c40c0-4a60-4ab7-ab65-7011c97c1a64", "row_index": 410, "timestamp": "2019-05-30T08:04:31Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 629, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "536c40c0-4a60-4ab7-ab65-7011c97c1a64", "eventTime": "2019-05-30T08:04:31Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86804c-a04e-4461-a50b-5b553ea9dc8f", "record_id": "flaws_cloudtrail:0000411:86804c-a04e-4461-a50b-5b553ea9dc8f", "row_index": 411, "timestamp": "2019-05-30T08:04:31Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 633, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86804c-a04e-4461-a50b-5b553ea9dc8f", "eventTime": "2019-05-30T08:04:31Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"pathPrefix": "/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef00dcee-9a67-4255-b071-8a5479df9f47", "record_id": "flaws_cloudtrail:0000412:ef00dcee-9a67-4255-b071-8a5479df9f47", "row_index": 412, "timestamp": "2019-05-30T08:04:31Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 643, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef00dcee-9a67-4255-b071-8a5479df9f47", "eventTime": "2019-05-30T08:04:31Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c9e9907-60e4-4ee7-87d6-39766deceb10", "record_id": "flaws_cloudtrail:0000413:3c9e9907-60e4-4ee7-87d6-39766deceb10", "row_index": 413, "timestamp": "2019-05-30T08:04:31Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 643, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c9e9907-60e4-4ee7-87d6-39766deceb10", "eventTime": "2019-05-30T08:04:31Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "536c40c0-4a60-4ab7-ab65-7011c97c1a64", "record_id": "flaws_cloudtrail:0000414:536c40c0-4a60-4ab7-ab65-7011c97c1a64", "row_index": 414, "timestamp": "2019-05-30T08:04:31Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 629, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "536c40c0-4a60-4ab7-ab65-7011c97c1a64", "eventTime": "2019-05-30T08:04:31Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16de55d5-e739-4cbe-8019-9e661105", "record_id": "flaws_cloudtrail:0000415:16de55d5-e739-4cbe-8019-9e661105", "row_index": 415, "timestamp": "2019-05-30T08:04:32Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 639, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16de55d5-e739-4cbe-8019-9e661105", "eventTime": "2019-05-30T08:04:32Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40aeb879-825e-461b-9606-06e9ad872f1c", "record_id": "flaws_cloudtrail:0000416:40aeb879-825e-461b-9606-06e9ad872f1c", "row_index": 416, "timestamp": "2019-05-30T08:04:32Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 625, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40aeb879-825e-461b-9606-06e9ad872f1c", "eventTime": "2019-05-30T08:04:32Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0cb3dcb-6c7c-4f8b-82ec-b5c7548f672d", "record_id": "flaws_cloudtrail:0000417:d0cb3dcb-6c7c-4f8b-82ec-b5c7548f672d", "row_index": 417, "timestamp": "2019-05-30T08:04:32Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 635, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0cb3dcb-6c7c-4f8b-82ec-b5c7548f672d", "eventTime": "2019-05-30T08:04:32Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"pathPrefix": "/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c205eb74-29a7-4d17-acc2-caae9dd6139f", "record_id": "flaws_cloudtrail:0000418:c205eb74-29a7-4d17-acc2-caae9dd6139f", "row_index": 418, "timestamp": "2019-05-30T08:04:32Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 646, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c205eb74-29a7-4d17-acc2-caae9dd6139f", "eventTime": "2019-05-30T08:04:32Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c6f3eae-7c80-4a0e-90d9-397327081847", "record_id": "flaws_cloudtrail:0000419:7c6f3eae-7c80-4a0e-90d9-397327081847", "row_index": 419, "timestamp": "2019-05-30T08:04:32Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 645, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c6f3eae-7c80-4a0e-90d9-397327081847", "eventTime": "2019-05-30T08:04:32Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "498013b8d-8951-414b-ae54-2a110965f807", "record_id": "flaws_cloudtrail:0000420:498013b8d-8951-414b-ae54-2a110965f807", "row_index": 420, "timestamp": "2019-05-30T08:04:32Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 645, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "498013b8d-8951-414b-ae54-2a110965f807", "eventTime": "2019-05-30T08:04:32Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16de55d5-e739-4cbe-8019-9e661105", "record_id": "flaws_cloudtrail:0000421:16de55d5-e739-4cbe-8019-9e661105", "row_index": 421, "timestamp": "2019-05-30T08:04:32Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 639, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16de55d5-e739-4cbe-8019-9e661105", "eventTime": "2019-05-30T08:04:32Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40aeb879-825e-461b-9606-06e9ad872f1c", "record_id": "flaws_cloudtrail:0000422:40aeb879-825e-461b-9606-06e9ad872f1c", "row_index": 422, "timestamp": "2019-05-30T08:04:32Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 625, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40aeb879-825e-461b-9606-06e9ad872f1c", "eventTime": "2019-05-30T08:04:32Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0cb3dcb-6c7c-4f8b-82ec-b5c7548f672d", "record_id": "flaws_cloudtrail:0000423:d0cb3dcb-6c7c-4f8b-82ec-b5c7548f672d", "row_index": 423, "timestamp": "2019-05-30T08:04:32Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 635, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0cb3dcb-6c7c-4f8b-82ec-b5c7548f672d", "eventTime": "2019-05-30T08:04:32Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"pathPrefix": "/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c205eb74-29a7-4d17-acc2-caae9dd6139f", "record_id": "flaws_cloudtrail:0000424:c205eb74-29a7-4d17-acc2-caae9dd6139f", "row_index": 424, "timestamp": "2019-05-30T08:04:32Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 646, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c205eb74-29a7-4d17-acc2-caae9dd6139f", "eventTime": "2019-05-30T08:04:32Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c6f3eae-7c80-4a0e-90d9-397327081847", "record_id": "flaws_cloudtrail:0000425:7c6f3eae-7c80-4a0e-90d9-397327081847", "row_index": 425, "timestamp": "2019-05-30T08:04:32Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 645, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c6f3eae-7c80-4a0e-90d9-397327081847", "eventTime": "2019-05-30T08:04:32Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "498013b8d-8951-414b-ae54-2a110965f807", "record_id": "flaws_cloudtrail:0000426:498013b8d-8951-414b-ae54-2a110965f807", "row_index": 426, "timestamp": "2019-05-30T08:04:32Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 645, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "498013b8d-8951-414b-ae54-2a110965f807", "eventTime": "2019-05-30T08:04:32Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f04c9c19-d14d-4e3d-ae7f-21964696a17d", "record_id": "flaws_cloudtrail:0000427:f04c9c19-d14d-4e3d-ae7f-21964696a17d", "row_index": 427, "timestamp": "2019-05-30T08:04:33Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f04c9c19-d14d-4e3d-ae7f-21964696a17d", "eventTime": "2019-05-30T08:04:33Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e87a177d-b578-419b-9ea2-c99a753052b55", "record_id": "flaws_cloudtrail:0000428:e87a177d-b578-419b-9ea2-c99a753052b55", "row_index": 428, "timestamp": "2019-05-30T08:04:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e87a177d-b578-419b-9ea2-c99a753052b55", "eventTime": "2019-05-30T08:04:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f04c9c19-d14d-4e3d-ae7f-21964696a17d", "record_id": "flaws_cloudtrail:0000429:f04c9c19-d14d-4e3d-ae7f-21964696a17d", "row_index": 429, "timestamp": "2019-05-30T08:04:33Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f04c9c19-d14d-4e3d-ae7f-21964696a17d", "eventTime": "2019-05-30T08:04:33Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e87a177d-b578-419b-9ea2-c99a753052b55", "record_id": "flaws_cloudtrail:0000430:e87a177d-b578-419b-9ea2-c99a753052b55", "row_index": 430, "timestamp": "2019-05-30T08:04:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e87a177d-b578-419b-9ea2-c99a753052b55", "eventTime": "2019-05-30T08:04:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e13b533c-41aa-4dd4-8ba5-22515ab5baa", "record_id": "flaws_cloudtrail:0000431:e13b533c-41aa-4dd4-8ba5-22515ab5baa", "row_index": 431, "timestamp": "2019-05-30T08:04:34Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e13b533c-41aa-4dd4-8ba5-22515ab5baa", "eventTime": "2019-05-30T08:04:34Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e13b533c-41aa-4dd4-8ba5-22515ab5baa", "record_id": "flaws_cloudtrail:0000432:e13b533c-41aa-4dd4-8ba5-22515ab5baa", "row_index": 432, "timestamp": "2019-05-30T08:04:34Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e13b533c-41aa-4dd4-8ba5-22515ab5baa", "eventTime": "2019-05-30T08:04:34Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "987ad02c-18cd-41f6-b5c4-31c085ce3d64", "record_id": "flaws_cloudtrail:0000433:987ad02c-18cd-41f6-b5c4-31c085ce3d64", "row_index": 433, "timestamp": "2019-05-30T08:04:35Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 632, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "987ad02c-18cd-41f6-b5c4-31c085ce3d64", "eventTime": "2019-05-30T08:04:35Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb692d75-1c87-4dbf-8846-7a7bc118397", "record_id": "flaws_cloudtrail:0000434:cb692d75-1c87-4dbf-8846-7a7bc118397", "row_index": 434, "timestamp": "2019-05-30T08:04:35Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 635, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb692d75-1c87-4dbf-8846-7a7bc118397", "eventTime": "2019-05-30T08:04:35Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8661b73-d467-4506-a4c3-ec83dd873157", "record_id": "flaws_cloudtrail:0000435:e8661b73-d467-4506-a4c3-ec83dd873157", "row_index": 435, "timestamp": "2019-05-30T08:04:35Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 631, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8661b73-d467-4506-a4c3-ec83dd873157", "eventTime": "2019-05-30T08:04:35Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "987ad02c-18cd-41f6-b5c4-31c085ce3d64", "record_id": "flaws_cloudtrail:0000436:987ad02c-18cd-41f6-b5c4-31c085ce3d64", "row_index": 436, "timestamp": "2019-05-30T08:04:35Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 632, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "987ad02c-18cd-41f6-b5c4-31c085ce3d64", "eventTime": "2019-05-30T08:04:35Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb692d75-1c87-4dbf-8846-7a7bc118397", "record_id": "flaws_cloudtrail:0000437:cb692d75-1c87-4dbf-8846-7a7bc118397", "row_index": 437, "timestamp": "2019-05-30T08:04:35Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 635, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb692d75-1c87-4dbf-8846-7a7bc118397", "eventTime": "2019-05-30T08:04:35Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8661b73-d467-4506-a4c3-ec83dd873157", "record_id": "flaws_cloudtrail:0000438:e8661b73-d467-4506-a4c3-ec83dd873157", "row_index": 438, "timestamp": "2019-05-30T08:04:35Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto/2.10.0 (linux2)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 631, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8661b73-d467-4506-a4c3-ec83dd873157", "eventTime": "2019-05-30T08:04:35Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto/2.10.0 (linux2)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d24fb57-fa8b-477e-be7f-5eef2de97372", "record_id": "flaws_cloudtrail:0000439:3d24fb57-fa8b-477e-be7f-5eef2de97372", "row_index": 439, "timestamp": "2019-05-30T08:06:22Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d24fb57-fa8b-477e-be7f-5eef2de97372", "eventTime": "2019-05-30T08:06:22Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d24fb57-fa8b-477e-be7f-5eef2de97372", "record_id": "flaws_cloudtrail:0000440:3d24fb57-fa8b-477e-be7f-5eef2de97372", "row_index": 440, "timestamp": "2019-05-30T08:06:22Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d24fb57-fa8b-477e-be7f-5eef2de97372", "eventTime": "2019-05-30T08:06:22Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.167 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.157", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ef4f266-962e-4955-aa54-162d541bc202", "record_id": "flaws_cloudtrail:0000441:6ef4f266-962e-4955-aa54-162d541bc202", "row_index": 441, "timestamp": "2019-05-30T08:07:35Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ef4f266-962e-4955-aa54-162d541bc202", "eventTime": "2019-05-30T08:07:35Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ef4f266-962e-4955-aa54-162d541bc202", "record_id": "flaws_cloudtrail:0000442:6ef4f266-962e-4955-aa54-162d541bc202", "row_index": 442, "timestamp": "2019-05-30T08:07:35Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ef4f266-962e-4955-aa54-162d541bc202", "eventTime": "2019-05-30T08:07:35Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ade15235-3474-4b9b-87a9-a788ebec3603", "record_id": "flaws_cloudtrail:0000443:ade15235-3474-4b9b-87a9-a788ebec3603", "row_index": 443, "timestamp": "2019-05-30T08:07:36Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ade15235-3474-4b9b-87a9-a788ebec3603", "eventTime": "2019-05-30T08:07:36Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ade15235-3474-4b9b-87a9-a788ebec3603", "record_id": "flaws_cloudtrail:0000444:ade15235-3474-4b9b-87a9-a788ebec3603", "row_index": 444, "timestamp": "2019-05-30T08:07:36Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ade15235-3474-4b9b-87a9-a788ebec3603", "eventTime": "2019-05-30T08:07:36Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c947127a7-590e-4901-a472-a5167a2978a2", "record_id": "flaws_cloudtrail:0000445:c947127a7-590e-4901-a472-a5167a2978a2", "row_index": 445, "timestamp": "2019-05-30T08:07:37Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c947127a7-590e-4901-a472-a5167a2978a2", "eventTime": "2019-05-30T08:07:37Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5184c4c5-3519-4715-839f-96fc325fa15f", "record_id": "flaws_cloudtrail:0000446:5184c4c5-3519-4715-839f-96fc325fa15f", "row_index": 446, "timestamp": "2019-05-30T08:07:37Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5184c4c5-3519-4715-839f-96fc325fa15f", "eventTime": "2019-05-30T08:07:37Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57e9de6e-4af1-4cbd-8dd0-b7224a939059", "record_id": "flaws_cloudtrail:0000447:57e9de6e-4af1-4cbd-8dd0-b7224a939059", "row_index": 447, "timestamp": "2019-05-30T08:07:37Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57e9de6e-4af1-4cbd-8dd0-b7224a939059", "eventTime": "2019-05-30T08:07:37Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e302158ca-5e47-4f8f-93a7-a8b8c30a5597", "record_id": "flaws_cloudtrail:0000448:e302158ca-5e47-4f8f-93a7-a8b8c30a5597", "row_index": 448, "timestamp": "2019-05-30T08:07:37Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e302158ca-5e47-4f8f-93a7-a8b8c30a5597", "eventTime": "2019-05-30T08:07:37Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fff6a119-c416-4859-bc3e-5fdffcec3906", "record_id": "flaws_cloudtrail:0000449:fff6a119-c416-4859-bc3e-5fdffcec3906", "row_index": 449, "timestamp": "2019-05-30T08:07:37Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fff6a119-c416-4859-bc3e-5fdffcec3906", "eventTime": "2019-05-30T08:07:37Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2cce501-246c-401f-9263-1ce2ebfd483d", "record_id": "flaws_cloudtrail:0000450:a2cce501-246c-401f-9263-1ce2ebfd483d", "row_index": 450, "timestamp": "2019-05-30T08:07:37Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2cce501-246c-401f-9263-1ce2ebfd483d", "eventTime": "2019-05-30T08:07:37Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc8c5a5c-4262-4bff-84d5-765a9fae5617", "record_id": "flaws_cloudtrail:0000451:cc8c5a5c-4262-4bff-84d5-765a9fae5617", "row_index": 451, "timestamp": "2019-05-30T08:07:37Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc8c5a5c-4262-4bff-84d5-765a9fae5617", "eventTime": "2019-05-30T08:07:37Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c947127a7-590e-4901-a472-a5167a2978a2", "record_id": "flaws_cloudtrail:0000452:c947127a7-590e-4901-a472-a5167a2978a2", "row_index": 452, "timestamp": "2019-05-30T08:07:37Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c947127a7-590e-4901-a472-a5167a2978a2", "eventTime": "2019-05-30T08:07:37Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5184c4c5-3519-4715-839f-96fc325fa15f", "record_id": "flaws_cloudtrail:0000453:5184c4c5-3519-4715-839f-96fc325fa15f", "row_index": 453, "timestamp": "2019-05-30T08:07:37Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5184c4c5-3519-4715-839f-96fc325fa15f", "eventTime": "2019-05-30T08:07:37Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57e9de6e-4af1-4cbd-8dd0-b7224a939059", "record_id": "flaws_cloudtrail:0000454:57e9de6e-4af1-4cbd-8dd0-b7224a939059", "row_index": 454, "timestamp": "2019-05-30T08:07:37Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57e9de6e-4af1-4cbd-8dd0-b7224a939059", "eventTime": "2019-05-30T08:07:37Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e302158ca-5e47-4f8f-93a7-a8b8c30a5597", "record_id": "flaws_cloudtrail:0000455:e302158ca-5e47-4f8f-93a7-a8b8c30a5597", "row_index": 455, "timestamp": "2019-05-30T08:07:37Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e302158ca-5e47-4f8f-93a7-a8b8c30a5597", "eventTime": "2019-05-30T08:07:37Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fff6a119-c416-4859-bc3e-5fdffcec3906", "record_id": "flaws_cloudtrail:0000456:fff6a119-c416-4859-bc3e-5fdffcec3906", "row_index": 456, "timestamp": "2019-05-30T08:07:37Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fff6a119-c416-4859-bc3e-5fdffcec3906", "eventTime": "2019-05-30T08:07:37Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2cce501-246c-401f-9263-1ce2ebfd483d", "record_id": "flaws_cloudtrail:0000457:a2cce501-246c-401f-9263-1ce2ebfd483d", "row_index": 457, "timestamp": "2019-05-30T08:07:37Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2cce501-246c-401f-9263-1ce2ebfd483d", "eventTime": "2019-05-30T08:07:37Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc8c5a5c-4262-4bff-84d5-765a9fae5617", "record_id": "flaws_cloudtrail:0000458:cc8c5a5c-4262-4bff-84d5-765a9fae5617", "row_index": 458, "timestamp": "2019-05-30T08:07:37Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc8c5a5c-4262-4bff-84d5-765a9fae5617", "eventTime": "2019-05-30T08:07:37Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c9239e8-7330-4a7f-8b91-30f5b099db1b", "record_id": "flaws_cloudtrail:0000459:3c9239e8-7330-4a7f-8b91-30f5b099db1b", "row_index": 459, "timestamp": "2019-05-30T08:07:55Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c9239e8-7330-4a7f-8b91-30f5b099db1b", "eventTime": "2019-05-30T08:07:55Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2480b480-37ee-4ab2-b79d-dcae5d7b31c0", "record_id": "flaws_cloudtrail:0000460:2480b480-37ee-4ab2-b79d-dcae5d7b31c0", "row_index": 460, "timestamp": "2019-05-30T08:07:55Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2480b480-37ee-4ab2-b79d-dcae5d7b31c0", "eventTime": "2019-05-30T08:07:55Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c9239e8-7330-4a7f-8b91-30f5b099db1b", "record_id": "flaws_cloudtrail:0000461:3c9239e8-7330-4a7f-8b91-30f5b099db1b", "row_index": 461, "timestamp": "2019-05-30T08:07:55Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c9239e8-7330-4a7f-8b91-30f5b099db1b", "eventTime": "2019-05-30T08:07:55Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2480b480-37ee-4ab2-b79d-dcae5d7b31c0", "record_id": "flaws_cloudtrail:0000462:2480b480-37ee-4ab2-b79d-dcae5d7b31c0", "row_index": 462, "timestamp": "2019-05-30T08:07:55Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2480b480-37ee-4ab2-b79d-dcae5d7b31c0", "eventTime": "2019-05-30T08:07:55Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "291e09a0-d5ac-41df-ba4b-458c944aa4db", "record_id": "flaws_cloudtrail:0000463:291e09a0-d5ac-41df-ba4b-458c944aa4db", "row_index": 463, "timestamp": "2019-05-30T08:07:56Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "291e09a0-d5ac-41df-ba4b-458c944aa4db", "eventTime": "2019-05-30T08:07:56Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "Local", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95aff14f-2265-4ee5-b242-a775731f2c9e0", "record_id": "flaws_cloudtrail:0000464:95aff14f-2265-4ee5-b242-a775731f2c9e0", "row_index": 464, "timestamp": "2019-05-30T08:07:56Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95aff14f-2265-4ee5-b242-a775731f2c9e0", "eventTime": "2019-05-30T08:07:56Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "291e09a0-d5ac-41df-ba4b-458c944aa4db", "record_id": "flaws_cloudtrail:0000465:291e09a0-d5ac-41df-ba4b-458c944aa4db", "row_index": 465, "timestamp": "2019-05-30T08:07:56Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "291e09a0-d5ac-41df-ba4b-458c944aa4db", "eventTime": "2019-05-30T08:07:56Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "Local", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95aff14f-2265-4ee5-b242-a775731f2c9e0", "record_id": "flaws_cloudtrail:0000466:95aff14f-2265-4ee5-b242-a775731f2c9e0", "row_index": 466, "timestamp": "2019-05-30T08:07:56Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95aff14f-2265-4ee5-b242-a775731f2c9e0", "eventTime": "2019-05-30T08:07:56Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "Boto3/1.7.48 Python/3.6.7 Linux/4.15.0-50-generic Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6523a2f-bac3-4818-9b54-29eacf8bf434", "record_id": "flaws_cloudtrail:0000467:f6523a2f-bac3-4818-9b54-29eacf8bf434", "row_index": 467, "timestamp": "2019-05-30T08:23:09Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6523a2f-bac3-4818-9b54-29eacf8bf434", "eventTime": "2019-05-30T08:23:09Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6523a2f-bac3-4818-9b54-29eacf8bf434", "record_id": "flaws_cloudtrail:0000468:f6523a2f-bac3-4818-9b54-29eacf8bf434", "row_index": 468, "timestamp": "2019-05-30T08:23:09Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6523a2f-bac3-4818-9b54-29eacf8bf434", "eventTime": "2019-05-30T08:23:09Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb1e9d1e-0841-4720-8a50-fa45bd39c3e8", "record_id": "flaws_cloudtrail:0000469:fb1e9d1e-0841-4720-8a50-fa45bd39c3e8", "row_index": 469, "timestamp": "2019-05-30T08:23:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb1e9d1e-0841-4720-8a50-fa45bd39c3e8", "eventTime": "2019-05-30T08:23:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb1e9d1e-0841-4720-8a50-fa45bd39c3e8", "record_id": "flaws_cloudtrail:0000470:fb1e9d1e-0841-4720-8a50-fa45bd39c3e8", "row_index": 470, "timestamp": "2019-05-30T08:23:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb1e9d1e-0841-4720-8a50-fa45bd39c3e8", "eventTime": "2019-05-30T08:23:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2557c33-5183-4c4e-a32b-22fd11054062", "record_id": "flaws_cloudtrail:0000471:f2557c33-5183-4c4e-a32b-22fd11054062", "row_index": 471, "timestamp": "2019-05-30T08:23:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2557c33-5183-4c4e-a32b-22fd11054062", "eventTime": "2019-05-30T08:23:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2557c33-5183-4c4e-a32b-22fd11054062", "record_id": "flaws_cloudtrail:0000472:f2557c33-5183-4c4e-a32b-22fd11054062", "row_index": 472, "timestamp": "2019-05-30T08:23:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2557c33-5183-4c4e-a32b-22fd11054062", "eventTime": "2019-05-30T08:23:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a846d188-8004-45f4-a7b2-02a437395ed3", "record_id": "flaws_cloudtrail:0000473:a846d188-8004-45f4-a7b2-02a437395ed3", "row_index": 473, "timestamp": "2019-05-30T08:23:12Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a846d188-8004-45f4-a7b2-02a437395ed3", "eventTime": "2019-05-30T08:23:12Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a846d188-8004-45f4-a7b2-02a437395ed3", "record_id": "flaws_cloudtrail:0000474:a846d188-8004-45f4-a7b2-02a437395ed3", "row_index": 474, "timestamp": "2019-05-30T08:23:12Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a846d188-8004-45f4-a7b2-02a437395ed3", "eventTime": "2019-05-30T08:23:12Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63c11a22-e095-4946-b367-38fadbf9fe29", "record_id": "flaws_cloudtrail:0000475:63c11a22-e095-4946-b367-38fadbf9fe29", "row_index": 475, "timestamp": "2019-05-30T08:23:14Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63c11a22-e095-4946-b367-38fadbf9fe29", "eventTime": "2019-05-30T08:23:14Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63c11a22-e095-4946-b367-38fadbf9fe29", "record_id": "flaws_cloudtrail:0000476:63c11a22-e095-4946-b367-38fadbf9fe29", "row_index": 476, "timestamp": "2019-05-30T08:23:14Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63c11a22-e095-4946-b367-38fadbf9fe29", "eventTime": "2019-05-30T08:23:14Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fee9963-afc1-49b4-946a-640a5488e963", "record_id": "flaws_cloudtrail:0000477:8fee9963-afc1-49b4-946a-640a5488e963", "row_index": 477, "timestamp": "2019-05-30T08:23:15Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fee9963-afc1-49b4-946a-640a5488e963", "eventTime": "2019-05-30T08:23:15Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fee9963-afc1-49b4-946a-640a5488e963", "record_id": "flaws_cloudtrail:0000478:8fee9963-afc1-49b4-946a-640a5488e963", "row_index": 478, "timestamp": "2019-05-30T08:23:15Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fee9963-afc1-49b4-946a-640a5488e963", "eventTime": "2019-05-30T08:23:15Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9497a65-fa62-4b9d-ba6a-b5dc37639e19", "record_id": "flaws_cloudtrail:0000479:c9497a65-fa62-4b9d-ba6a-b5dc37639e19", "row_index": 479, "timestamp": "2019-05-30T08:23:16Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9497a65-fa62-4b9d-ba6a-b5dc37639e19", "eventTime": "2019-05-30T08:23:16Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9497a65-fa62-4b9d-ba6a-b5dc37639e19", "record_id": "flaws_cloudtrail:0000480:c9497a65-fa62-4b9d-ba6a-b5dc37639e19", "row_index": 480, "timestamp": "2019-05-30T08:23:16Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9497a65-fa62-4b9d-ba6a-b5dc37639e19", "eventTime": "2019-05-30T08:23:16Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f9ae545-2d75-4246-80f5-c5f7fcc9b2c3", "record_id": "flaws_cloudtrail:0000481:3f9ae545-2d75-4246-80f5-c5f7fcc9b2c3", "row_index": 481, "timestamp": "2019-05-30T08:23:17Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f9ae545-2d75-4246-80f5-c5f7fcc9b2c3", "eventTime": "2019-05-30T08:23:17Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f084fd4-4a43-4421-8785-7cf458ae27d3", "record_id": "flaws_cloudtrail:0000482:6f084fd4-4a43-4421-8785-7cf458ae27d3", "row_index": 482, "timestamp": "2019-05-30T08:23:17Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f084fd4-4a43-4421-8785-7cf458ae27d3", "eventTime": "2019-05-30T08:23:17Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f9ae545-2d75-4246-80f5-c5f7fcc9b2c3", "record_id": "flaws_cloudtrail:0000483:3f9ae545-2d75-4246-80f5-c5f7fcc9b2c3", "row_index": 483, "timestamp": "2019-05-30T08:23:17Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f9ae545-2d75-4246-80f5-c5f7fcc9b2c3", "eventTime": "2019-05-30T08:23:17Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f084fd4-4a43-4421-8785-7cf458ae27d3", "record_id": "flaws_cloudtrail:0000484:6f084fd4-4a43-4421-8785-7cf458ae27d3", "row_index": 484, "timestamp": "2019-05-30T08:23:17Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f084fd4-4a43-4421-8785-7cf458ae27d3", "eventTime": "2019-05-30T08:23:17Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d52e4f9f-cbfd-4cf3-a05d-1bd8c862436a", "record_id": "flaws_cloudtrail:0000485:d52e4f9f-cbfd-4cf3-a05d-1bd8c862436a", "row_index": 485, "timestamp": "2019-05-30T08:23:18Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d52e4f9f-cbfd-4cf3-a05d-1bd8c862436a", "eventTime": "2019-05-30T08:23:18Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d52e4f9f-cbfd-4cf3-a05d-1bd8c862436a", "record_id": "flaws_cloudtrail:0000486:d52e4f9f-cbfd-4cf3-a05d-1bd8c862436a", "row_index": 486, "timestamp": "2019-05-30T08:23:18Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d52e4f9f-cbfd-4cf3-a05d-1bd8c862436a", "eventTime": "2019-05-30T08:23:18Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc627f70-3e01-41ea-81cb-721c310a7089", "record_id": "flaws_cloudtrail:0000487:cc627f70-3e01-41ea-81cb-721c310a7089", "row_index": 487, "timestamp": "2019-05-30T08:23:19Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc627f70-3e01-41ea-81cb-721c310a7089", "eventTime": "2019-05-30T08:23:19Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc627f70-3e01-41ea-81cb-721c310a7089", "record_id": "flaws_cloudtrail:0000488:cc627f70-3e01-41ea-81cb-721c310a7089", "row_index": 488, "timestamp": "2019-05-30T08:23:19Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc627f70-3e01-41ea-81cb-721c310a7089", "eventTime": "2019-05-30T08:23:19Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28fbc111-e743-4f0a-a233-f36bcd236789", "record_id": "flaws_cloudtrail:0000489:28fbc111-e743-4f0a-a233-f36bcd236789", "row_index": 489, "timestamp": "2019-05-30T08:23:20Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28fbc111-e743-4f0a-a233-f36bcd236789", "eventTime": "2019-05-30T08:23:20Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28fbc111-e743-4f0a-a233-f36bcd236789", "record_id": "flaws_cloudtrail:0000490:28fbc111-e743-4f0a-a233-f36bcd236789", "row_index": 490, "timestamp": "2019-05-30T08:23:20Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28fbc111-e743-4f0a-a233-f36bcd236789", "eventTime": "2019-05-30T08:23:20Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3ff64cf-abbe-48d1-90f7-9221cf74082", "record_id": "flaws_cloudtrail:0000491:d3ff64cf-abbe-48d1-90f7-9221cf74082", "row_index": 491, "timestamp": "2019-05-30T08:23:21Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3ff64cf-abbe-48d1-90f7-9221cf74082", "eventTime": "2019-05-30T08:23:21Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3ff64cf-abbe-48d1-90f7-9221cf74082", "record_id": "flaws_cloudtrail:0000492:d3ff64cf-abbe-48d1-90f7-9221cf74082", "row_index": 492, "timestamp": "2019-05-30T08:23:21Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3ff64cf-abbe-48d1-90f7-9221cf74082", "eventTime": "2019-05-30T08:23:21Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ef6bff7-be27-4fa2-b071-468a915ffd39", "record_id": "flaws_cloudtrail:0000493:1ef6bff7-be27-4fa2-b071-468a915ffd39", "row_index": 493, "timestamp": "2019-05-30T08:23:22Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ef6bff7-be27-4fa2-b071-468a915ffd39", "eventTime": "2019-05-30T08:23:22Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ef6bff7-be27-4fa2-b071-468a915ffd39", "record_id": "flaws_cloudtrail:0000494:1ef6bff7-be27-4fa2-b071-468a915ffd39", "row_index": 494, "timestamp": "2019-05-30T08:23:22Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ef6bff7-be27-4fa2-b071-468a915ffd39", "eventTime": "2019-05-30T08:23:22Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab815317-a72f-4d2f-ac96-df088b29f9a9", "record_id": "flaws_cloudtrail:0000495:ab815317-a72f-4d2f-ac96-df088b29f9a9", "row_index": 495, "timestamp": "2019-05-30T08:23:23Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab815317-a72f-4d2f-ac96-df088b29f9a9", "eventTime": "2019-05-30T08:23:23Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab815317-a72f-4d2f-ac96-df088b29f9a9", "record_id": "flaws_cloudtrail:0000496:ab815317-a72f-4d2f-ac96-df088b29f9a9", "row_index": 496, "timestamp": "2019-05-30T08:23:23Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab815317-a72f-4d2f-ac96-df088b29f9a9", "eventTime": "2019-05-30T08:23:23Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf79289-9c4f-4d42-870d-1a2c8c082ec2", "record_id": "flaws_cloudtrail:0000497:cf79289-9c4f-4d42-870d-1a2c8c082ec2", "row_index": 497, "timestamp": "2019-05-30T08:23:24Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf79289-9c4f-4d42-870d-1a2c8c082ec2", "eventTime": "2019-05-30T08:23:24Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"assignmentStatus": "Assigned"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf79289-9c4f-4d42-870d-1a2c8c082ec2", "record_id": "flaws_cloudtrail:0000498:cf79289-9c4f-4d42-870d-1a2c8c082ec2", "row_index": 498, "timestamp": "2019-05-30T08:23:24Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf79289-9c4f-4d42-870d-1a2c8c082ec2", "eventTime": "2019-05-30T08:23:24Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"assignmentStatus": "Assigned"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "226b50e7-6c36-4c69-a7b8-f3f2cbdb0cd3", "record_id": "flaws_cloudtrail:0000499:226b50e7-6c36-4c69-a7b8-f3f2cbdb0cd3", "row_index": 499, "timestamp": "2019-05-30T08:23:25Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "226b50e7-6c36-4c69-a7b8-f3f2cbdb0cd3", "eventTime": "2019-05-30T08:23:25Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac5b5f63-3d6a-4b4f-b3eb-5816cf6e7de9", "record_id": "flaws_cloudtrail:0000500:ac5b5f63-3d6a-4b4f-b3eb-5816cf6e7de9", "row_index": 500, "timestamp": "2019-05-30T08:23:25Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac5b5f63-3d6a-4b4f-b3eb-5816cf6e7de9", "eventTime": "2019-05-30T08:23:25Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "226b50e7-6c36-4c69-a7b8-f3f2cbdb0cd3", "record_id": "flaws_cloudtrail:0000501:226b50e7-6c36-4c69-a7b8-f3f2cbdb0cd3", "row_index": 501, "timestamp": "2019-05-30T08:23:25Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "226b50e7-6c36-4c69-a7b8-f3f2cbdb0cd3", "eventTime": "2019-05-30T08:23:25Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac5b5f63-3d6a-4b4f-b3eb-5816cf6e7de9", "record_id": "flaws_cloudtrail:0000502:ac5b5f63-3d6a-4b4f-b3eb-5816cf6e7de9", "row_index": 502, "timestamp": "2019-05-30T08:23:25Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac5b5f63-3d6a-4b4f-b3eb-5816cf6e7de9", "eventTime": "2019-05-30T08:23:25Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a956737b-975a-4c7f-9a14-1e500f9ddb64", "record_id": "flaws_cloudtrail:0000503:a956737b-975a-4c7f-9a14-1e500f9ddb64", "row_index": 503, "timestamp": "2019-05-30T08:23:26Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a956737b-975a-4c7f-9a14-1e500f9ddb64", "eventTime": "2019-05-30T08:23:26Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a956737b-975a-4c7f-9a14-1e500f9ddb64", "record_id": "flaws_cloudtrail:0000504:a956737b-975a-4c7f-9a14-1e500f9ddb64", "row_index": 504, "timestamp": "2019-05-30T08:23:26Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a956737b-975a-4c7f-9a14-1e500f9ddb64", "eventTime": "2019-05-30T08:23:26Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6576f28c-1c4a-4add-a3a1-f0bdd6aa847c", "record_id": "flaws_cloudtrail:0000505:6576f28c-1c4a-4add-a3a1-f0bdd6aa847c", "row_index": 505, "timestamp": "2019-05-30T08:23:27Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6576f28c-1c4a-4add-a3a1-f0bdd6aa847c", "eventTime": "2019-05-30T08:23:27Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6576f28c-1c4a-4add-a3a1-f0bdd6aa847c", "record_id": "flaws_cloudtrail:0000506:6576f28c-1c4a-4add-a3a1-f0bdd6aa847c", "row_index": 506, "timestamp": "2019-05-30T08:23:27Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6576f28c-1c4a-4add-a3a1-f0bdd6aa847c", "eventTime": "2019-05-30T08:23:27Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9650cbd-99dd-4deb-afbd-db22d8ce4bb5", "record_id": "flaws_cloudtrail:0000507:e9650cbd-99dd-4deb-afbd-db22d8ce4bb5", "row_index": 507, "timestamp": "2019-05-30T08:23:28Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9650cbd-99dd-4deb-afbd-db22d8ce4bb5", "eventTime": "2019-05-30T08:23:28Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9650cbd-99dd-4deb-afbd-db22d8ce4bb5", "record_id": "flaws_cloudtrail:0000508:e9650cbd-99dd-4deb-afbd-db22d8ce4bb5", "row_index": 508, "timestamp": "2019-05-30T08:23:28Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9650cbd-99dd-4deb-afbd-db22d8ce4bb5", "eventTime": "2019-05-30T08:23:28Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcc51eaf-ba64-42c8-9065-8f79fc086478e", "record_id": "flaws_cloudtrail:0000509:bcc51eaf-ba64-42c8-9065-8f79fc086478e", "row_index": 509, "timestamp": "2019-05-30T08:23:29Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcc51eaf-ba64-42c8-9065-8f79fc086478e", "eventTime": "2019-05-30T08:23:29Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACFXbPOefOjXR2Xl2MjECrHRmvnOJgC6Mg2R38O+o6tEXg8aSfk9facjIAcRadCdyYcrb/0zOr9sOgVkrcU3/8I9w8isdjvxYPftrxJpNcZMgQ==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77ea6c09-75fc-4e76-a20d-104c13ab1628", "record_id": "flaws_cloudtrail:0000510:77ea6c09-75fc-4e76-a20d-104c13ab1628", "row_index": 510, "timestamp": "2019-05-30T08:23:29Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77ea6c09-75fc-4e76-a20d-104c13ab1628", "eventTime": "2019-05-30T08:23:29Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABD1b6a2Gm9V7yM5biSjt4YEpU1T0/zhVSq/CaMDgppuU0sQLNpSf4sz19Iz82bTHelxbi8ccy+YMIU9LI6R04LRSwrmb7vuiCwrtwa1WyQAsQ==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa0ae824-237c-4d85-85b2-14a3db895833", "record_id": "flaws_cloudtrail:0000511:fa0ae824-237c-4d85-85b2-14a3db895833", "row_index": 511, "timestamp": "2019-05-30T08:23:29Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa0ae824-237c-4d85-85b2-14a3db895833", "eventTime": "2019-05-30T08:23:29Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcc51eaf-ba64-42c8-9065-8f79fc086478e", "record_id": "flaws_cloudtrail:0000512:bcc51eaf-ba64-42c8-9065-8f79fc086478e", "row_index": 512, "timestamp": "2019-05-30T08:23:29Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcc51eaf-ba64-42c8-9065-8f79fc086478e", "eventTime": "2019-05-30T08:23:29Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACFXbPOefOjXR2Xl2MjECrHRmvnOJgC6Mg2R38O+o6tEXg8aSfk9facjIAcRadCdyYcrb/0zOr9sOgVkrcU3/8I9w8isdjvxYPftrxJpNcZMgQ==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77ea6c09-75fc-4e76-a20d-104c13ab1628", "record_id": "flaws_cloudtrail:0000513:77ea6c09-75fc-4e76-a20d-104c13ab1628", "row_index": 513, "timestamp": "2019-05-30T08:23:29Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77ea6c09-75fc-4e76-a20d-104c13ab1628", "eventTime": "2019-05-30T08:23:29Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABD1b6a2Gm9V7yM5biSjt4YEpU1T0/zhVSq/CaMDgppuU0sQLNpSf4sz19Iz82bTHelxbi8ccy+YMIU9LI6R04LRSwrmb7vuiCwrtwa1WyQAsQ==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa0ae824-237c-4d85-85b2-14a3db895833", "record_id": "flaws_cloudtrail:0000514:fa0ae824-237c-4d85-85b2-14a3db895833", "row_index": 514, "timestamp": "2019-05-30T08:23:29Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa0ae824-237c-4d85-85b2-14a3db895833", "eventTime": "2019-05-30T08:23:29Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "903659-4c4a-4544-bd69-31e5289b39f3", "record_id": "flaws_cloudtrail:0000515:903659-4c4a-4544-bd69-31e5289b39f3", "row_index": 515, "timestamp": "2019-05-30T08:23:30Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "903659-4c4a-4544-bd69-31e5289b39f3", "eventTime": "2019-05-30T08:23:30Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AB3hEVNymqYqeYRyklulT/PoNENunwGeIlV5NL9HTa6jJ3mSRlBsiB8TYczFj/HcNztAdZ1+ORc9RfAhRXGHY6Lbw2hx8+cHvOGadTHFQSE/tg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "140f911f-4b12-4885-81c5-06f6eade7a16", "record_id": "flaws_cloudtrail:0000516:140f911f-4b12-4885-81c5-06f6eade7a16", "row_index": 516, "timestamp": "2019-05-30T08:23:30Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "140f911f-4b12-4885-81c5-06f6eade7a16", "eventTime": "2019-05-30T08:23:30Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACiPHlcz862eNhUI34o8ImM/FiJpoYcdM479UzEvTuYXHhuxCsKXjTFzr7gM2cvlABito3KviEcBECgA6WDUnYXRC7IP8QAZaHjkltKfbTkGDA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5748eb31-fa8d-4373-b790-60264d0ece", "record_id": "flaws_cloudtrail:0000517:5748eb31-fa8d-4373-b790-60264d0ece", "row_index": 517, "timestamp": "2019-05-30T08:23:30Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5748eb31-fa8d-4373-b790-60264d0ece", "eventTime": "2019-05-30T08:23:30Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACXFRK/S2l/Nj2SFANt81f5X172LmIffuGMc6eLFttGe6fBceQqPGJgiktEeg3T++NKv3bDPcmbRoLIpcpVx/aTsnWSUpxnfJGCdQo8r6pJYqg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "903659-4c4a-4544-bd69-31e5289b39f3", "record_id": "flaws_cloudtrail:0000518:903659-4c4a-4544-bd69-31e5289b39f3", "row_index": 518, "timestamp": "2019-05-30T08:23:30Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "903659-4c4a-4544-bd69-31e5289b39f3", "eventTime": "2019-05-30T08:23:30Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AB3hEVNymqYqeYRyklulT/PoNENunwGeIlV5NL9HTa6jJ3mSRlBsiB8TYczFj/HcNztAdZ1+ORc9RfAhRXGHY6Lbw2hx8+cHvOGadTHFQSE/tg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "140f911f-4b12-4885-81c5-06f6eade7a16", "record_id": "flaws_cloudtrail:0000519:140f911f-4b12-4885-81c5-06f6eade7a16", "row_index": 519, "timestamp": "2019-05-30T08:23:30Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "140f911f-4b12-4885-81c5-06f6eade7a16", "eventTime": "2019-05-30T08:23:30Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACiPHlcz862eNhUI34o8ImM/FiJpoYcdM479UzEvTuYXHhuxCsKXjTFzr7gM2cvlABito3KviEcBECgA6WDUnYXRC7IP8QAZaHjkltKfbTkGDA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5748eb31-fa8d-4373-b790-60264d0ece", "record_id": "flaws_cloudtrail:0000520:5748eb31-fa8d-4373-b790-60264d0ece", "row_index": 520, "timestamp": "2019-05-30T08:23:30Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5748eb31-fa8d-4373-b790-60264d0ece", "eventTime": "2019-05-30T08:23:30Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACXFRK/S2l/Nj2SFANt81f5X172LmIffuGMc6eLFttGe6fBceQqPGJgiktEeg3T++NKv3bDPcmbRoLIpcpVx/aTsnWSUpxnfJGCdQo8r6pJYqg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c2c3c27-c723-4ce2-8740-aaa4ed5f9a86", "record_id": "flaws_cloudtrail:0000521:6c2c3c27-c723-4ce2-8740-aaa4ed5f9a86", "row_index": 521, "timestamp": "2019-05-30T08:23:31Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c2c3c27-c723-4ce2-8740-aaa4ed5f9a86", "eventTime": "2019-05-30T08:23:31Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSSupportAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c2c3c27-c723-4ce2-8740-aaa4ed5f9a86", "record_id": "flaws_cloudtrail:0000522:6c2c3c27-c723-4ce2-8740-aaa4ed5f9a86", "row_index": 522, "timestamp": "2019-05-30T08:23:31Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c2c3c27-c723-4ce2-8740-aaa4ed5f9a86", "eventTime": "2019-05-30T08:23:31Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSSupportAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "629144f-e6ae-49c7-9852-b224242a235c3", "record_id": "flaws_cloudtrail:0000523:629144f-e6ae-49c7-9852-b224242a235c3", "row_index": 523, "timestamp": "2019-05-30T08:23:32Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "629144f-e6ae-49c7-9852-b224242a235c3", "eventTime": "2019-05-30T08:23:32Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "629144f-e6ae-49c7-9852-b224242a235c3", "record_id": "flaws_cloudtrail:0000524:629144f-e6ae-49c7-9852-b224242a235c3", "row_index": 524, "timestamp": "2019-05-30T08:23:32Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "629144f-e6ae-49c7-9852-b224242a235c3", "eventTime": "2019-05-30T08:23:32Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d60d305f-ce0c-448c-b334-a2116ebce5e3", "record_id": "flaws_cloudtrail:0000525:d60d305f-ce0c-448c-b334-a2116ebce5e3", "row_index": 525, "timestamp": "2019-05-30T08:23:33Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d60d305f-ce0c-448c-b334-a2116ebce5e3", "eventTime": "2019-05-30T08:23:33Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "Local", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d60d305f-ce0c-448c-b334-a2116ebce5e3", "record_id": "flaws_cloudtrail:0000526:d60d305f-ce0c-448c-b334-a2116ebce5e3", "row_index": 526, "timestamp": "2019-05-30T08:23:33Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d60d305f-ce0c-448c-b334-a2116ebce5e3", "eventTime": "2019-05-30T08:23:33Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "Local", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "289fcce7-b812-4cf7-ae56-5ca6a2edba78", "record_id": "flaws_cloudtrail:0000527:289fcce7-b812-4cf7-ae56-5ca6a2edba78", "row_index": 527, "timestamp": "2019-05-30T08:23:34Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "289fcce7-b812-4cf7-ae56-5ca6a2edba78", "eventTime": "2019-05-30T08:23:34Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v10"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7df815934-e509-4405-b1a0-7b913559da1", "record_id": "flaws_cloudtrail:0000528:7df815934-e509-4405-b1a0-7b913559da1", "row_index": 528, "timestamp": "2019-05-30T08:23:34Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7df815934-e509-4405-b1a0-7b913559da1", "eventTime": "2019-05-30T08:23:34Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-4e23caa8-1f82-45b5-9068-3200fb1a0c7a", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "289fcce7-b812-4cf7-ae56-5ca6a2edba78", "record_id": "flaws_cloudtrail:0000529:289fcce7-b812-4cf7-ae56-5ca6a2edba78", "row_index": 529, "timestamp": "2019-05-30T08:23:34Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "289fcce7-b812-4cf7-ae56-5ca6a2edba78", "eventTime": "2019-05-30T08:23:34Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v10"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7df815934-e509-4405-b1a0-7b913559da1", "record_id": "flaws_cloudtrail:0000530:7df815934-e509-4405-b1a0-7b913559da1", "row_index": 530, "timestamp": "2019-05-30T08:23:34Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7df815934-e509-4405-b1a0-7b913559da1", "eventTime": "2019-05-30T08:23:34Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-4e23caa8-1f82-45b5-9068-3200fb1a0c7a", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee8831d5-c299-4fda-b9a7-1999bfc8121b", "record_id": "flaws_cloudtrail:0000531:ee8831d5-c299-4fda-b9a7-1999bfc8121b", "row_index": 531, "timestamp": "2019-05-30T08:23:35Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee8831d5-c299-4fda-b9a7-1999bfc8121b", "eventTime": "2019-05-30T08:23:35Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee8831d5-c299-4fda-b9a7-1999bfc8121b", "record_id": "flaws_cloudtrail:0000532:ee8831d5-c299-4fda-b9a7-1999bfc8121b", "row_index": 532, "timestamp": "2019-05-30T08:23:35Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee8831d5-c299-4fda-b9a7-1999bfc8121b", "eventTime": "2019-05-30T08:23:35Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b850967-1e86-4a00-8a67-591f12f7a8b8", "record_id": "flaws_cloudtrail:0000533:6b850967-1e86-4a00-8a67-591f12f7a8b8", "row_index": 533, "timestamp": "2019-05-30T08:23:36Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b850967-1e86-4a00-8a67-591f12f7a8b8", "eventTime": "2019-05-30T08:23:36Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkey", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b850967-1e86-4a00-8a67-591f12f7a8b8", "record_id": "flaws_cloudtrail:0000534:6b850967-1e86-4a00-8a67-591f12f7a8b8", "row_index": 534, "timestamp": "2019-05-30T08:23:36Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b850967-1e86-4a00-8a67-591f12f7a8b8", "eventTime": "2019-05-30T08:23:36Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkey", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f716e8a7-8b95-4dd3-8271-22403e9424c4", "record_id": "flaws_cloudtrail:0000535:f716e8a7-8b95-4dd3-8271-22403e9424c4", "row_index": 535, "timestamp": "2019-05-30T08:23:37Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f716e8a7-8b95-4dd3-8271-22403e9424c4", "eventTime": "2019-05-30T08:23:37Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-b6ab3a24-1aa4-4855-94d4-40cdef59ec5b", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f716e8a7-8b95-4dd3-8271-22403e9424c4", "record_id": "flaws_cloudtrail:0000536:f716e8a7-8b95-4dd3-8271-22403e9424c4", "row_index": 536, "timestamp": "2019-05-30T08:23:37Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f716e8a7-8b95-4dd3-8271-22403e9424c4", "eventTime": "2019-05-30T08:23:37Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-b6ab3a24-1aa4-4855-94d4-40cdef59ec5b", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c05d9ee3-0f0a-4883-a425-1956e997ae81", "record_id": "flaws_cloudtrail:0000537:c05d9ee3-0f0a-4883-a425-1956e997ae81", "row_index": 537, "timestamp": "2019-05-30T08:23:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c05d9ee3-0f0a-4883-a425-1956e997ae81", "eventTime": "2019-05-30T08:23:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c05d9ee3-0f0a-4883-a425-1956e997ae81", "record_id": "flaws_cloudtrail:0000538:c05d9ee3-0f0a-4883-a425-1956e997ae81", "row_index": 538, "timestamp": "2019-05-30T08:23:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c05d9ee3-0f0a-4883-a425-1956e997ae81", "eventTime": "2019-05-30T08:23:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5bdf404-113b-4425-8309-9b385829b7d8", "record_id": "flaws_cloudtrail:0000539:d5bdf404-113b-4425-8309-9b385829b7d8", "row_index": 539, "timestamp": "2019-05-30T08:23:39Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5bdf404-113b-4425-8309-9b385829b7d8", "eventTime": "2019-05-30T08:23:39Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkeyPerms", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5bdf404-113b-4425-8309-9b385829b7d8", "record_id": "flaws_cloudtrail:0000540:d5bdf404-113b-4425-8309-9b385829b7d8", "row_index": 540, "timestamp": "2019-05-30T08:23:39Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5bdf404-113b-4425-8309-9b385829b7d8", "eventTime": "2019-05-30T08:23:39Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkeyPerms", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4446e8c9-84d8-4842-9e41-f654377d9d329", "record_id": "flaws_cloudtrail:0000541:4446e8c9-84d8-4842-9e41-f654377d9d329", "row_index": 541, "timestamp": "2019-05-30T08:23:40Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4446e8c9-84d8-4842-9e41-f654377d9d329", "eventTime": "2019-05-30T08:23:40Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4446e8c9-84d8-4842-9e41-f654377d9d329", "record_id": "flaws_cloudtrail:0000542:4446e8c9-84d8-4842-9e41-f654377d9d329", "row_index": 542, "timestamp": "2019-05-30T08:23:40Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4446e8c9-84d8-4842-9e41-f654377d9d329", "eventTime": "2019-05-30T08:23:40Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "853d0412-aa5f-4ec7-b5e9-bac87144a", "record_id": "flaws_cloudtrail:0000543:853d0412-aa5f-4ec7-b5e9-bac87144a", "row_index": 543, "timestamp": "2019-05-30T08:23:41Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "853d0412-aa5f-4ec7-b5e9-bac87144a", "eventTime": "2019-05-30T08:23:41Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/config-role-us-west-2_AWSConfigDeliveryPermissions_us-west-2", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "853d0412-aa5f-4ec7-b5e9-bac87144a", "record_id": "flaws_cloudtrail:0000544:853d0412-aa5f-4ec7-b5e9-bac87144a", "row_index": 544, "timestamp": "2019-05-30T08:23:41Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "853d0412-aa5f-4ec7-b5e9-bac87144a", "eventTime": "2019-05-30T08:23:41Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/config-role-us-west-2_AWSConfigDeliveryPermissions_us-west-2", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "882631b-ba26-4522-b097-409b5d5dcda4", "record_id": "flaws_cloudtrail:0000545:882631b-ba26-4522-b097-409b5d5dcda4", "row_index": 545, "timestamp": "2019-05-30T08:23:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "882631b-ba26-4522-b097-409b5d5dcda4", "eventTime": "2019-05-30T08:23:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "882631b-ba26-4522-b097-409b5d5dcda4", "record_id": "flaws_cloudtrail:0000546:882631b-ba26-4522-b097-409b5d5dcda4", "row_index": 546, "timestamp": "2019-05-30T08:23:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "882631b-ba26-4522-b097-409b5d5dcda4", "eventTime": "2019-05-30T08:23:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22f3824a-9528-4b5f-97a3-9b68be2c11c3", "record_id": "flaws_cloudtrail:0000547:22f3824a-9528-4b5f-97a3-9b68be2c11c3", "row_index": 547, "timestamp": "2019-05-30T08:23:43Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22f3824a-9528-4b5f-97a3-9b68be2c11c3", "eventTime": "2019-05-30T08:23:43Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6c9100d-dadc-4857-bdc6-bcad37ee59c7", "record_id": "flaws_cloudtrail:0000548:b6c9100d-dadc-4857-bdc6-bcad37ee59c7", "row_index": 548, "timestamp": "2019-05-30T08:23:43Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6c9100d-dadc-4857-bdc6-bcad37ee59c7", "eventTime": "2019-05-30T08:23:43Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22f3824a-9528-4b5f-97a3-9b68be2c11c3", "record_id": "flaws_cloudtrail:0000549:22f3824a-9528-4b5f-97a3-9b68be2c11c3", "row_index": 549, "timestamp": "2019-05-30T08:23:43Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22f3824a-9528-4b5f-97a3-9b68be2c11c3", "eventTime": "2019-05-30T08:23:43Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6c9100d-dadc-4857-bdc6-bcad37ee59c7", "record_id": "flaws_cloudtrail:0000550:b6c9100d-dadc-4857-bdc6-bcad37ee59c7", "row_index": 550, "timestamp": "2019-05-30T08:23:43Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6c9100d-dadc-4857-bdc6-bcad37ee59c7", "eventTime": "2019-05-30T08:23:43Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed6a0091-b9a0-4e93-8ea5-716d20fb4025", "record_id": "flaws_cloudtrail:0000551:ed6a0091-b9a0-4e93-8ea5-716d20fb4025", "row_index": 551, "timestamp": "2019-05-30T08:23:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed6a0091-b9a0-4e93-8ea5-716d20fb4025", "eventTime": "2019-05-30T08:23:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed6a0091-b9a0-4e93-8ea5-716d20fb4025", "record_id": "flaws_cloudtrail:0000552:ed6a0091-b9a0-4e93-8ea5-716d20fb4025", "row_index": 552, "timestamp": "2019-05-30T08:23:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed6a0091-b9a0-4e93-8ea5-716d20fb4025", "eventTime": "2019-05-30T08:23:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ccbefa4-d300-41be-a51a-bb069794784a", "record_id": "flaws_cloudtrail:0000553:5ccbefa4-d300-41be-a51a-bb069794784a", "row_index": 553, "timestamp": "2019-05-30T08:23:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ccbefa4-d300-41be-a51a-bb069794784a", "eventTime": "2019-05-30T08:23:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ccbefa4-d300-41be-a51a-bb069794784a", "record_id": "flaws_cloudtrail:0000554:5ccbefa4-d300-41be-a51a-bb069794784a", "row_index": 554, "timestamp": "2019-05-30T08:23:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ccbefa4-d300-41be-a51a-bb069794784a", "eventTime": "2019-05-30T08:23:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c467dd57-d892-4b24-8e25-d01f301630", "record_id": "flaws_cloudtrail:0000555:c467dd57-d892-4b24-8e25-d01f301630", "row_index": 555, "timestamp": "2019-05-30T08:23:46Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c467dd57-d892-4b24-8e25-d01f301630", "eventTime": "2019-05-30T08:23:46Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c467dd57-d892-4b24-8e25-d01f301630", "record_id": "flaws_cloudtrail:0000556:c467dd57-d892-4b24-8e25-d01f301630", "row_index": 556, "timestamp": "2019-05-30T08:23:46Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c467dd57-d892-4b24-8e25-d01f301630", "eventTime": "2019-05-30T08:23:46Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de78cf61-0557-491d-9a14-8a322c5351b3", "record_id": "flaws_cloudtrail:0000557:de78cf61-0557-491d-9a14-8a322c5351b3", "row_index": 557, "timestamp": "2019-05-30T08:23:48Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de78cf61-0557-491d-9a14-8a322c5351b3", "eventTime": "2019-05-30T08:23:48Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de78cf61-0557-491d-9a14-8a322c5351b3", "record_id": "flaws_cloudtrail:0000558:de78cf61-0557-491d-9a14-8a322c5351b3", "row_index": 558, "timestamp": "2019-05-30T08:23:48Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de78cf61-0557-491d-9a14-8a322c5351b3", "eventTime": "2019-05-30T08:23:48Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88747f7d-7a65-49fe-a532-97244f14d53f", "record_id": "flaws_cloudtrail:0000559:88747f7d-7a65-49fe-a532-97244f14d53f", "row_index": 559, "timestamp": "2019-05-30T08:23:49Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88747f7d-7a65-49fe-a532-97244f14d53f", "eventTime": "2019-05-30T08:23:49Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88747f7d-7a65-49fe-a532-97244f14d53f", "record_id": "flaws_cloudtrail:0000560:88747f7d-7a65-49fe-a532-97244f14d53f", "row_index": 560, "timestamp": "2019-05-30T08:23:49Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88747f7d-7a65-49fe-a532-97244f14d53f", "eventTime": "2019-05-30T08:23:49Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae6176c7-fe27-4552-9ba4-f6383d6cc2ca", "record_id": "flaws_cloudtrail:0000561:ae6176c7-fe27-4552-9ba4-f6383d6cc2ca", "row_index": 561, "timestamp": "2019-05-30T08:23:50Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae6176c7-fe27-4552-9ba4-f6383d6cc2ca", "eventTime": "2019-05-30T08:23:50Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae6176c7-fe27-4552-9ba4-f6383d6cc2ca", "record_id": "flaws_cloudtrail:0000562:ae6176c7-fe27-4552-9ba4-f6383d6cc2ca", "row_index": 562, "timestamp": "2019-05-30T08:23:50Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae6176c7-fe27-4552-9ba4-f6383d6cc2ca", "eventTime": "2019-05-30T08:23:50Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbe1ddf8-1da5-4246-ac57-5f7e0d7104eb", "record_id": "flaws_cloudtrail:0000563:fbe1ddf8-1da5-4246-ac57-5f7e0d7104eb", "row_index": 563, "timestamp": "2019-05-30T08:23:51Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbe1ddf8-1da5-4246-ac57-5f7e0d7104eb", "eventTime": "2019-05-30T08:23:51Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbe1ddf8-1da5-4246-ac57-5f7e0d7104eb", "record_id": "flaws_cloudtrail:0000564:fbe1ddf8-1da5-4246-ac57-5f7e0d7104eb", "row_index": 564, "timestamp": "2019-05-30T08:23:51Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbe1ddf8-1da5-4246-ac57-5f7e0d7104eb", "eventTime": "2019-05-30T08:23:51Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0cebd1a-c92d-4f2d-9289-c87b8db107141", "record_id": "flaws_cloudtrail:0000565:d0cebd1a-c92d-4f2d-9289-c87b8db107141", "row_index": 565, "timestamp": "2019-05-30T08:23:54Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0cebd1a-c92d-4f2d-9289-c87b8db107141", "eventTime": "2019-05-30T08:23:54Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0534bbba-0732-4d3e-a581-833a045a660b", "record_id": "flaws_cloudtrail:0000566:0534bbba-0732-4d3e-a581-833a045a660b", "row_index": 566, "timestamp": "2019-05-30T08:23:54Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0534bbba-0732-4d3e-a581-833a045a660b", "eventTime": "2019-05-30T08:23:54Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0cebd1a-c92d-4f2d-9289-c87b8db107141", "record_id": "flaws_cloudtrail:0000567:d0cebd1a-c92d-4f2d-9289-c87b8db107141", "row_index": 567, "timestamp": "2019-05-30T08:23:54Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0cebd1a-c92d-4f2d-9289-c87b8db107141", "eventTime": "2019-05-30T08:23:54Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0534bbba-0732-4d3e-a581-833a045a660b", "record_id": "flaws_cloudtrail:0000568:0534bbba-0732-4d3e-a581-833a045a660b", "row_index": 568, "timestamp": "2019-05-30T08:23:54Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0534bbba-0732-4d3e-a581-833a045a660b", "eventTime": "2019-05-30T08:23:54Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b7cb671-778a-40dc-aec7-01819d4e912d", "record_id": "flaws_cloudtrail:0000569:6b7cb671-778a-40dc-aec7-01819d4e912d", "row_index": 569, "timestamp": "2019-05-30T08:23:55Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b7cb671-778a-40dc-aec7-01819d4e912d", "eventTime": "2019-05-30T08:23:55Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b7cb671-778a-40dc-aec7-01819d4e912d", "record_id": "flaws_cloudtrail:0000570:6b7cb671-778a-40dc-aec7-01819d4e912d", "row_index": 570, "timestamp": "2019-05-30T08:23:55Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b7cb671-778a-40dc-aec7-01819d4e912d", "eventTime": "2019-05-30T08:23:55Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7f372c2-07fe-4a5f-9a90-0782d4b0f611", "record_id": "flaws_cloudtrail:0000571:d7f372c2-07fe-4a5f-9a90-0782d4b0f611", "row_index": 571, "timestamp": "2019-05-30T08:23:56Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7f372c2-07fe-4a5f-9a90-0782d4b0f611", "eventTime": "2019-05-30T08:23:56Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7f372c2-07fe-4a5f-9a90-0782d4b0f611", "record_id": "flaws_cloudtrail:0000572:d7f372c2-07fe-4a5f-9a90-0782d4b0f611", "row_index": 572, "timestamp": "2019-05-30T08:23:56Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7f372c2-07fe-4a5f-9a90-0782d4b0f611", "eventTime": "2019-05-30T08:23:56Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aded48e-2217-40ea-8ebd-ba6c147cd2e5", "record_id": "flaws_cloudtrail:0000573:5aded48e-2217-40ea-8ebd-ba6c147cd2e5", "row_index": 573, "timestamp": "2019-05-30T08:23:57Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aded48e-2217-40ea-8ebd-ba6c147cd2e5", "eventTime": "2019-05-30T08:23:57Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aded48e-2217-40ea-8ebd-ba6c147cd2e5", "record_id": "flaws_cloudtrail:0000574:5aded48e-2217-40ea-8ebd-ba6c147cd2e5", "row_index": 574, "timestamp": "2019-05-30T08:23:57Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aded48e-2217-40ea-8ebd-ba6c147cd2e5", "eventTime": "2019-05-30T08:23:57Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8201e66-35dd-4409-a2b7-94f8447c300e", "record_id": "flaws_cloudtrail:0000575:f8201e66-35dd-4409-a2b7-94f8447c300e", "row_index": 575, "timestamp": "2019-05-30T08:23:58Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8201e66-35dd-4409-a2b7-94f8447c300e", "eventTime": "2019-05-30T08:23:58Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8201e66-35dd-4409-a2b7-94f8447c300e", "record_id": "flaws_cloudtrail:0000576:f8201e66-35dd-4409-a2b7-94f8447c300e", "row_index": 576, "timestamp": "2019-05-30T08:23:58Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8201e66-35dd-4409-a2b7-94f8447c300e", "eventTime": "2019-05-30T08:23:58Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9d4d2b6-37af-4005-8aaa-ec40c8c2ef62", "record_id": "flaws_cloudtrail:0000577:e9d4d2b6-37af-4005-8aaa-ec40c8c2ef62", "row_index": 577, "timestamp": "2019-05-30T08:24:00Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9d4d2b6-37af-4005-8aaa-ec40c8c2ef62", "eventTime": "2019-05-30T08:24:00Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "658ac602-b719-45de-bcec-e21397d8d83b", "record_id": "flaws_cloudtrail:0000578:658ac602-b719-45de-bcec-e21397d8d83b", "row_index": 578, "timestamp": "2019-05-30T08:24:00Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "658ac602-b719-45de-bcec-e21397d8d83b", "eventTime": "2019-05-30T08:24:00Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"trailNameList": ["cloudtrail"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9d4d2b6-37af-4005-8aaa-ec40c8c2ef62", "record_id": "flaws_cloudtrail:0000579:e9d4d2b6-37af-4005-8aaa-ec40c8c2ef62", "row_index": 579, "timestamp": "2019-05-30T08:24:00Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9d4d2b6-37af-4005-8aaa-ec40c8c2ef62", "eventTime": "2019-05-30T08:24:00Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "658ac602-b719-45de-bcec-e21397d8d83b", "record_id": "flaws_cloudtrail:0000580:658ac602-b719-45de-bcec-e21397d8d83b", "row_index": 580, "timestamp": "2019-05-30T08:24:00Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "658ac602-b719-45de-bcec-e21397d8d83b", "eventTime": "2019-05-30T08:24:00Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"trailNameList": ["cloudtrail"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4710b060-5a77-40a2-9d73-216f1c9110ae", "record_id": "flaws_cloudtrail:0000581:4710b060-5a77-40a2-9d73-216f1c9110ae", "row_index": 581, "timestamp": "2019-05-30T08:24:01Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4710b060-5a77-40a2-9d73-216f1c9110ae", "eventTime": "2019-05-30T08:24:01Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4710b060-5a77-40a2-9d73-216f1c9110ae", "record_id": "flaws_cloudtrail:0000582:4710b060-5a77-40a2-9d73-216f1c9110ae", "row_index": 582, "timestamp": "2019-05-30T08:24:01Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4710b060-5a77-40a2-9d73-216f1c9110ae", "eventTime": "2019-05-30T08:24:01Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b613f3f5-bd5a-45ec-af09-172e056161e95", "record_id": "flaws_cloudtrail:0000583:b613f3f5-bd5a-45ec-af09-172e056161e95", "row_index": 583, "timestamp": "2019-05-30T08:24:02Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b613f3f5-bd5a-45ec-af09-172e056161e95", "eventTime": "2019-05-30T08:24:02Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65b5fd7b-ab1b-41d7-b919-925015ce1d", "record_id": "flaws_cloudtrail:0000584:65b5fd7b-ab1b-41d7-b919-925015ce1d", "row_index": 584, "timestamp": "2019-05-30T08:24:02Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65b5fd7b-ab1b-41d7-b919-925015ce1d", "eventTime": "2019-05-30T08:24:02Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b613f3f5-bd5a-45ec-af09-172e056161e95", "record_id": "flaws_cloudtrail:0000585:b613f3f5-bd5a-45ec-af09-172e056161e95", "row_index": 585, "timestamp": "2019-05-30T08:24:02Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b613f3f5-bd5a-45ec-af09-172e056161e95", "eventTime": "2019-05-30T08:24:02Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65b5fd7b-ab1b-41d7-b919-925015ce1d", "record_id": "flaws_cloudtrail:0000586:65b5fd7b-ab1b-41d7-b919-925015ce1d", "row_index": 586, "timestamp": "2019-05-30T08:24:02Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65b5fd7b-ab1b-41d7-b919-925015ce1d", "eventTime": "2019-05-30T08:24:02Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fd3f1ea-c812-43a9-8eb6-32451dcabcff", "record_id": "flaws_cloudtrail:0000587:3fd3f1ea-c812-43a9-8eb6-32451dcabcff", "row_index": 587, "timestamp": "2019-05-30T08:24:03Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fd3f1ea-c812-43a9-8eb6-32451dcabcff", "eventTime": "2019-05-30T08:24:03Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fd3f1ea-c812-43a9-8eb6-32451dcabcff", "record_id": "flaws_cloudtrail:0000588:3fd3f1ea-c812-43a9-8eb6-32451dcabcff", "row_index": 588, "timestamp": "2019-05-30T08:24:03Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fd3f1ea-c812-43a9-8eb6-32451dcabcff", "eventTime": "2019-05-30T08:24:03Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba09e0da-74b6-48f2-a6f6-6b7def9711d8", "record_id": "flaws_cloudtrail:0000589:ba09e0da-74b6-48f2-a6f6-6b7def9711d8", "row_index": 589, "timestamp": "2019-05-30T08:24:04Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba09e0da-74b6-48f2-a6f6-6b7def9711d8", "eventTime": "2019-05-30T08:24:04Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba09e0da-74b6-48f2-a6f6-6b7def9711d8", "record_id": "flaws_cloudtrail:0000590:ba09e0da-74b6-48f2-a6f6-6b7def9711d8", "row_index": 590, "timestamp": "2019-05-30T08:24:04Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba09e0da-74b6-48f2-a6f6-6b7def9711d8", "eventTime": "2019-05-30T08:24:04Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "308aa510-9f4d-4dab-85d5-5e46fb1910d8", "record_id": "flaws_cloudtrail:0000591:308aa510-9f4d-4dab-85d5-5e46fb1910d8", "row_index": 591, "timestamp": "2019-05-30T08:24:06Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "308aa510-9f4d-4dab-85d5-5e46fb1910d8", "eventTime": "2019-05-30T08:24:06Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "308aa510-9f4d-4dab-85d5-5e46fb1910d8", "record_id": "flaws_cloudtrail:0000592:308aa510-9f4d-4dab-85d5-5e46fb1910d8", "row_index": 592, "timestamp": "2019-05-30T08:24:06Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "308aa510-9f4d-4dab-85d5-5e46fb1910d8", "eventTime": "2019-05-30T08:24:06Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d73af88-84b2-41b8-a860-70227af2df99", "record_id": "flaws_cloudtrail:0000593:8d73af88-84b2-41b8-a860-70227af2df99", "row_index": 593, "timestamp": "2019-05-30T08:24:07Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d73af88-84b2-41b8-a860-70227af2df99", "eventTime": "2019-05-30T08:24:07Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d73af88-84b2-41b8-a860-70227af2df99", "record_id": "flaws_cloudtrail:0000594:8d73af88-84b2-41b8-a860-70227af2df99", "row_index": 594, "timestamp": "2019-05-30T08:24:07Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d73af88-84b2-41b8-a860-70227af2df99", "eventTime": "2019-05-30T08:24:07Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c23f111-c859-4c4c-9041-f045cb476dfd", "record_id": "flaws_cloudtrail:0000595:8c23f111-c859-4c4c-9041-f045cb476dfd", "row_index": 595, "timestamp": "2019-05-30T08:24:08Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c23f111-c859-4c4c-9041-f045cb476dfd", "eventTime": "2019-05-30T08:24:08Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c23f111-c859-4c4c-9041-f045cb476dfd", "record_id": "flaws_cloudtrail:0000596:8c23f111-c859-4c4c-9041-f045cb476dfd", "row_index": 596, "timestamp": "2019-05-30T08:24:08Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c23f111-c859-4c4c-9041-f045cb476dfd", "eventTime": "2019-05-30T08:24:08Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9c7faf5-2827-4418-957d-2aba83307d1d", "record_id": "flaws_cloudtrail:0000597:f9c7faf5-2827-4418-957d-2aba83307d1d", "row_index": 597, "timestamp": "2019-05-30T08:24:09Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9c7faf5-2827-4418-957d-2aba83307d1d", "eventTime": "2019-05-30T08:24:09Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9c7faf5-2827-4418-957d-2aba83307d1d", "record_id": "flaws_cloudtrail:0000598:f9c7faf5-2827-4418-957d-2aba83307d1d", "row_index": 598, "timestamp": "2019-05-30T08:24:09Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9c7faf5-2827-4418-957d-2aba83307d1d", "eventTime": "2019-05-30T08:24:09Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b91bb1e7-fe87-45fa-af12-7e7df1b55f8d", "record_id": "flaws_cloudtrail:0000599:b91bb1e7-fe87-45fa-af12-7e7df1b55f8d", "row_index": 599, "timestamp": "2019-05-30T08:24:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b91bb1e7-fe87-45fa-af12-7e7df1b55f8d", "eventTime": "2019-05-30T08:24:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14e9dcc2-fa36-46bc-860d-b57af519d281", "record_id": "flaws_cloudtrail:0000600:14e9dcc2-fa36-46bc-860d-b57af519d281", "row_index": 600, "timestamp": "2019-05-30T08:24:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14e9dcc2-fa36-46bc-860d-b57af519d281", "eventTime": "2019-05-30T08:24:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b91bb1e7-fe87-45fa-af12-7e7df1b55f8d", "record_id": "flaws_cloudtrail:0000601:b91bb1e7-fe87-45fa-af12-7e7df1b55f8d", "row_index": 601, "timestamp": "2019-05-30T08:24:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b91bb1e7-fe87-45fa-af12-7e7df1b55f8d", "eventTime": "2019-05-30T08:24:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14e9dcc2-fa36-46bc-860d-b57af519d281", "record_id": "flaws_cloudtrail:0000602:14e9dcc2-fa36-46bc-860d-b57af519d281", "row_index": 602, "timestamp": "2019-05-30T08:24:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14e9dcc2-fa36-46bc-860d-b57af519d281", "eventTime": "2019-05-30T08:24:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f706f97-dda8-429f-bedd-6cba474aecf2", "record_id": "flaws_cloudtrail:0000603:2f706f97-dda8-429f-bedd-6cba474aecf2", "row_index": 603, "timestamp": "2019-05-30T08:24:12Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f706f97-dda8-429f-bedd-6cba474aecf2", "eventTime": "2019-05-30T08:24:12Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f706f97-dda8-429f-bedd-6cba474aecf2", "record_id": "flaws_cloudtrail:0000604:2f706f97-dda8-429f-bedd-6cba474aecf2", "row_index": 604, "timestamp": "2019-05-30T08:24:12Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f706f97-dda8-429f-bedd-6cba474aecf2", "eventTime": "2019-05-30T08:24:12Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41f123eb-ec55-4053-aa93-d69bbb1a2472", "record_id": "flaws_cloudtrail:0000605:41f123eb-ec55-4053-aa93-d69bbb1a2472", "row_index": 605, "timestamp": "2019-05-30T08:24:13Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.239.255.179", "user_agent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41f123eb-ec55-4053-aa93-d69bbb1a2472", "eventTime": "2019-05-30T08:24:13Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.239.255.179", "userAgent": "aws-cli/1.16.168 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.158", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShadowTrails": false}, "resources": []}}