Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM principal appears to confirm who they are, survey the account’s audit-trail configuration, and then take action to reduce CloudTrail visibility. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6acda3d-355a-492d-a670-c7666bb6d2cc", "record_id": "flaws_cloudtrail:0000000:e6acda3d-355a-492d-a670-c7666bb6d2cc", "row_index": 0, "timestamp": "2018-04-16T09:21:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1928, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6acda3d-355a-492d-a670-c7666bb6d2cc", "eventTime": "2018-04-16T09:21:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GUC-PTqS-1Ei5ZjPr0fOJePAqs2hAVT4KuWgoSt1F5iMxvUrtODj8IEyjFEFdq1u4ahxfFJ3ztUT50r1E1AMh6bmhrtbrT2Hd6ESADo7hyj598s6MeF0Q_ny1-3cVJXgoLN2m6JTaSEv0T7BWRJ16cxzUjqn2DIocoPAMMK8eetZ5WJyfysxO1pibYq1QTr2SwhPtKHZs1QtlEFY7S3WusKrrEEUHO9X6cpYV-3VbIzGq4DaaCaLFRi8FUbAujAxBbHRSqB9SuwPflWSBgph6R9t9W6BWt59DU2WR9WnzdoabtLd2JSTeCLvT34Q7wso4V6bHPs42gu8AstWUm3n_O7PM8w86hlLF156Ly15P-kKcXhaq4hu3iTQS9WowbIvmsZ-DFs9NJZSyX3u4lpyh5JxvCK3XbohjrxQ4u90Y7UTzid6MLm52VeycAxQLD9sMWmngRknZjwVyKluofWQkMyGGfqcIgXOvRPY4o85l7_0dvPf7ChnnH-y2SxF7I98PbPnFGj-j8hZH7FWCBAF2pc_UFCED4b-rI_8VWQ1M2ZAEzGaIUA71tSb_OAdjAVg3iRHcs6cbB6tdDfc7R6h4jjDaMm_Qi7w2kzI7O2nnkJn3m6HAOnPbGF3u-Qf4gR4jnWVE9p2_QsRvEUT2aBngppZp-awsHiZ7kw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51220-73e3-4838-b553-12fe24fb3f07", "record_id": "flaws_cloudtrail:0000001:51220-73e3-4838-b553-12fe24fb3f07", "row_index": 1, "timestamp": "2018-04-16T09:21:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1372, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51220-73e3-4838-b553-12fe24fb3f07", "eventTime": "2018-04-16T09:21:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89d576f9-6173-4660-b63e-e13756d7679e", "record_id": "flaws_cloudtrail:0000002:89d576f9-6173-4660-b63e-e13756d7679e", "row_index": 2, "timestamp": "2018-04-16T09:21:29Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89d576f9-6173-4660-b63e-e13756d7679e", "eventTime": "2018-04-16T09:21:29Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c7e4983-bf47-420f-a24c-c82b44860b99", "record_id": "flaws_cloudtrail:0000003:4c7e4983-bf47-420f-a24c-c82b44860b99", "row_index": 3, "timestamp": "2018-04-16T09:21:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c7e4983-bf47-420f-a24c-c82b44860b99", "eventTime": "2018-04-16T09:21:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e6d15d5-46cc-4ff5-b26c-397154b6805c", "record_id": "flaws_cloudtrail:0000004:5e6d15d5-46cc-4ff5-b26c-397154b6805c", "row_index": 4, "timestamp": "2018-04-16T09:21:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e6d15d5-46cc-4ff5-b26c-397154b6805c", "eventTime": "2018-04-16T09:21:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a6ca055-d86b-47fc-af8e-9e26debcf461", "record_id": "flaws_cloudtrail:0000005:7a6ca055-d86b-47fc-af8e-9e26debcf461", "row_index": 5, "timestamp": "2018-04-16T09:21:30Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a6ca055-d86b-47fc-af8e-9e26debcf461", "eventTime": "2018-04-16T09:21:30Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ab18012-aa6e-4b3f-9da4-0d29dbcad3bd", "record_id": "flaws_cloudtrail:0000006:4ab18012-aa6e-4b3f-9da4-0d29dbcad3bd", "row_index": 6, "timestamp": "2018-04-16T09:21:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ab18012-aa6e-4b3f-9da4-0d29dbcad3bd", "eventTime": "2018-04-16T09:21:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee41b282-3c7b-43d1-80fe-7c9d88b6a31b", "record_id": "flaws_cloudtrail:0000007:ee41b282-3c7b-43d1-80fe-7c9d88b6a31b", "row_index": 7, "timestamp": "2018-04-16T09:21:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee41b282-3c7b-43d1-80fe-7c9d88b6a31b", "eventTime": "2018-04-16T09:21:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab0733c5-f70f-4f28-82d9-76b0e4332a5c", "record_id": "flaws_cloudtrail:0000008:ab0733c5-f70f-4f28-82d9-76b0e4332a5c", "row_index": 8, "timestamp": "2018-04-16T09:21:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab0733c5-f70f-4f28-82d9-76b0e4332a5c", "eventTime": "2018-04-16T09:21:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "296d4db6-26ed-4ddc-a63f-901a13db211c", "record_id": "flaws_cloudtrail:0000009:296d4db6-26ed-4ddc-a63f-901a13db211c", "row_index": 9, "timestamp": "2018-04-16T09:21:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "296d4db6-26ed-4ddc-a63f-901a13db211c", "eventTime": "2018-04-16T09:21:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55db0a53-1831-4b45-8f7d-7cbf147fe5f7", "record_id": "flaws_cloudtrail:0000010:55db0a53-1831-4b45-8f7d-7cbf147fe5f7", "row_index": 10, "timestamp": "2018-04-16T09:21:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55db0a53-1831-4b45-8f7d-7cbf147fe5f7", "eventTime": "2018-04-16T09:21:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: n3Zbjy4Q6EeWOIXZmo96DzLPFhi-w7tMwBMfCDenE2BN698vmWrd8acDyXwdgkqLjy9WAg42fjyJgUPQskCoh97UlatxHlPWp87X6ld_Uj9yUnpCpSFMDEJ-kwUQwJF_JCzJOA6srd2NIkRNtbbjmqzdFg1gjK6OlbJS-maLpJaZNk7PPNhnw6AVG6txhrbt-3M7Q6GllHeDeYvu63HP5MAqsNYLGK0gfRE9dOI0RNZf52gqQbNQJe6fmvGnTDR9CvVwJ_coCU9QzfX-s8R3DjOWJx8DF8OhK1xBucP6Q7qct5iRHY-wPWbwPUjbRD0uJ4EvfWxVsM52Zle6sdFTqRkB6UM14rchHzpAItYffZA1aBgwCBhqhUlWJl1_lIW8xKZllWyGBgBApMKHEcZyHa0s_ZtQEo1kFGmVV6Y4K04m597dV7eNOp-tH9j0o6Ou27DuXxN-gwsBZ7b52MSKMQ7fFCgea4H8j35snEEkAtzOzfv5nahzgFaoJnNfaejTe2-zg1NQ5H8tCAhe9DvPTpf98fixMtfwVKMvWl-bjb67fJHY52fI2ci1sI67sOFdnJJiApMIec2qgINsgcUYs50n5HBvSP7gUrmxtoLlPqtuUH_obzilwR62pputs495gWkLIFkPzFJBehpc6pxG8QIjqQDdoTNqWA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "402b2d45-6ef8-4aaf-8848-838e022b8b30", "record_id": "flaws_cloudtrail:0000011:402b2d45-6ef8-4aaf-8848-838e022b8b30", "row_index": 11, "timestamp": "2018-04-16T09:21:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "402b2d45-6ef8-4aaf-8848-838e022b8b30", "eventTime": "2018-04-16T09:21:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18648e2a-ff7c-435e-b138-f06aaa7ffa16", "record_id": "flaws_cloudtrail:0000012:18648e2a-ff7c-435e-b138-f06aaa7ffa16", "row_index": 12, "timestamp": "2018-04-16T09:21:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18648e2a-ff7c-435e-b138-f06aaa7ffa16", "eventTime": "2018-04-16T09:21:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67a01bfc-8b54-4efc-a200-fbfb24b3b295", "record_id": "flaws_cloudtrail:0000013:67a01bfc-8b54-4efc-a200-fbfb24b3b295", "row_index": 13, "timestamp": "2018-04-16T09:21:33Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67a01bfc-8b54-4efc-a200-fbfb24b3b295", "eventTime": "2018-04-16T09:21:33Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0df6ce32-a870-4194-961d-32723dec0876", "record_id": "flaws_cloudtrail:0000014:0df6ce32-a870-4194-961d-32723dec0876", "row_index": 14, "timestamp": "2018-04-16T09:21:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0df6ce32-a870-4194-961d-32723dec0876", "eventTime": "2018-04-16T09:21:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd93aa1c-f958-4344-985c-1932443833b9", "record_id": "flaws_cloudtrail:0000015:fd93aa1c-f958-4344-985c-1932443833b9", "row_index": 15, "timestamp": "2018-04-16T09:21:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd93aa1c-f958-4344-985c-1932443833b9", "eventTime": "2018-04-16T09:21:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58e21f98-77f4-4f58-8f3d-d7bdf2465119", "record_id": "flaws_cloudtrail:0000016:58e21f98-77f4-4f58-8f3d-d7bdf2465119", "row_index": 16, "timestamp": "2018-04-16T09:21:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58e21f98-77f4-4f58-8f3d-d7bdf2465119", "eventTime": "2018-04-16T09:21:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb42bf2c-154d-47db-b5bb-f4753beafdde", "record_id": "flaws_cloudtrail:0000017:bb42bf2c-154d-47db-b5bb-f4753beafdde", "row_index": 17, "timestamp": "2018-04-16T09:21:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1267, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb42bf2c-154d-47db-b5bb-f4753beafdde", "eventTime": "2018-04-16T09:21:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8588b0c-419f-4ef1-ac72-d170aa80a766", "record_id": "flaws_cloudtrail:0000018:f8588b0c-419f-4ef1-ac72-d170aa80a766", "row_index": 18, "timestamp": "2018-04-16T09:21:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8588b0c-419f-4ef1-ac72-d170aa80a766", "eventTime": "2018-04-16T09:21:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f5bb611-28e9-482e-9ec2-743766d29df8", "record_id": "flaws_cloudtrail:0000019:5f5bb611-28e9-482e-9ec2-743766d29df8", "row_index": 19, "timestamp": "2018-04-16T09:21:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f5bb611-28e9-482e-9ec2-743766d29df8", "eventTime": "2018-04-16T09:21:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dfe0467-50ca-4ec8-abdb-1f490306e27d", "record_id": "flaws_cloudtrail:0000020:5dfe0467-50ca-4ec8-abdb-1f490306e27d", "row_index": 20, "timestamp": "2018-04-16T09:21:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dfe0467-50ca-4ec8-abdb-1f490306e27d", "eventTime": "2018-04-16T09:21:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: clmXmZ92oKtlAXgnSYl07iAFm9nDNxPrSmPUEXVg8Gws4Fe5sJGWe7vn5OeBePGohidJRnXM8zxtvai1LPpGzeTimE-UkJJoO4btJXVkreCvlTehSL-NKQ42AA_dBvCENZMl8qV6ZVzXPVek-__pyKMo5zqaSLINJDth7J43eoqKEbk-nmpiNEHHIZOFnf3U3pjlu6q72PJhuArXRAxmfbOuQOLbht-ZLLd9CWAxtLTJPwjGRmUAhNTRGSsTm7XwracZu-bwpRKodzPzAOI_2VuU6vcmqexp2FRPh-odAzpzGmQW60typl4nIW9dMSuWsSYCed7GP7_cPLpJrX54PVwi_D9juHHAO1acJFi2tgGKkbczwOnFliLMg9_Z3WXqyZ7rDzSxpUy00hmrV0qJ6PAyR9HrRSLvK43yt2Yg243yS1PFKhoddTcWcWpQzbpgOQ8WvdrzLj4qSG8fIgMqCVWdE_DF3rHJm81uMYEX-wqnINTB2gNlxADdIO7zBJj9EOuPJp5UYlveU61XEh8o0mqOWIOIhi-objx1iLxvpVDkCbE8MAein2hvbfYjZKrua_1Z7J254ONexs9K2mnqtm0Xvg_AThEgsEQsE1oIdmhKd8qWur0-X7tCohqIPn65wz-Cxkr-dC6_JnQhY-FtnnrS5NvS744KzA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da240416a-a02e-409d-887c-caa17663e8ba", "record_id": "flaws_cloudtrail:0000021:da240416a-a02e-409d-887c-caa17663e8ba", "row_index": 21, "timestamp": "2018-04-16T09:21:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da240416a-a02e-409d-887c-caa17663e8ba", "eventTime": "2018-04-16T09:21:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aafd08f0-1603-4396-9174-72bcc1402e88", "record_id": "flaws_cloudtrail:0000022:aafd08f0-1603-4396-9174-72bcc1402e88", "row_index": 22, "timestamp": "2018-04-16T09:21:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aafd08f0-1603-4396-9174-72bcc1402e88", "eventTime": "2018-04-16T09:21:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b484141b-88a5-4769-9467-19ff4415db08", "record_id": "flaws_cloudtrail:0000023:b484141b-88a5-4769-9467-19ff4415db08", "row_index": 23, "timestamp": "2018-04-16T09:21:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b484141b-88a5-4769-9467-19ff4415db08", "eventTime": "2018-04-16T09:21:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8bbb43d-7145-4264-8f2d-49ad738f2e48", "record_id": "flaws_cloudtrail:0000024:c8bbb43d-7145-4264-8f2d-49ad738f2e48", "row_index": 24, "timestamp": "2018-04-16T09:21:36Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8bbb43d-7145-4264-8f2d-49ad738f2e48", "eventTime": "2018-04-16T09:21:36Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35c80550-3f93-400a-9040-5ef776306c74", "record_id": "flaws_cloudtrail:0000025:35c80550-3f93-400a-9040-5ef776306c74", "row_index": 25, "timestamp": "2018-04-16T09:21:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35c80550-3f93-400a-9040-5ef776306c74", "eventTime": "2018-04-16T09:21:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d3068aa-46b4-4839-b320-6f7744d5a128", "record_id": "flaws_cloudtrail:0000026:5d3068aa-46b4-4839-b320-6f7744d5a128", "row_index": 26, "timestamp": "2018-04-16T09:21:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d3068aa-46b4-4839-b320-6f7744d5a128", "eventTime": "2018-04-16T09:21:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "caf4eb97-abaa-40df-ad71-32c4eb9bbd2d", "record_id": "flaws_cloudtrail:0000027:caf4eb97-abaa-40df-ad71-32c4eb9bbd2d", "row_index": 27, "timestamp": "2018-04-16T09:21:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "caf4eb97-abaa-40df-ad71-32c4eb9bbd2d", "eventTime": "2018-04-16T09:21:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "355f97ab-5877-4ac6-ac99-6dd3b964ea13", "record_id": "flaws_cloudtrail:0000028:355f97ab-5877-4ac6-ac99-6dd3b964ea13", "row_index": 28, "timestamp": "2018-04-16T09:21:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "355f97ab-5877-4ac6-ac99-6dd3b964ea13", "eventTime": "2018-04-16T09:21:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bbea9a4-9189-461d-9320-3e55d77311", "record_id": "flaws_cloudtrail:0000029:8bbea9a4-9189-461d-9320-3e55d77311", "row_index": 29, "timestamp": "2018-04-16T09:21:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bbea9a4-9189-461d-9320-3e55d77311", "eventTime": "2018-04-16T09:21:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e11c83f-b4e8-4d7d-a637-b06b47e1b431", "record_id": "flaws_cloudtrail:0000030:9e11c83f-b4e8-4d7d-a637-b06b47e1b431", "row_index": 30, "timestamp": "2018-04-16T09:21:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e11c83f-b4e8-4d7d-a637-b06b47e1b431", "eventTime": "2018-04-16T09:21:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca8a1bc9-f0c6-4267-8845-980958d282eba", "record_id": "flaws_cloudtrail:0000031:ca8a1bc9-f0c6-4267-8845-980958d282eba", "row_index": 31, "timestamp": "2018-04-16T09:21:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1378, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca8a1bc9-f0c6-4267-8845-980958d282eba", "eventTime": "2018-04-16T09:21:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1f372323-8d03-4310-9fb1-ab9cc9f72c4c", "record_id": "flaws_cloudtrail:0000032:c1f372323-8d03-4310-9fb1-ab9cc9f72c4c", "row_index": 32, "timestamp": "2018-04-16T09:21:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1f372323-8d03-4310-9fb1-ab9cc9f72c4c", "eventTime": "2018-04-16T09:21:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: CyCxrdhrt10X6U5_8uAPnS46HqAoV5oLzdGQtn2mETbtUQZ1rt4Iv7knezkUxASG5x7Uqo3bURwxbSR7ZGsombI9OCcH1jMsCqqPrEF2VnJYIvdfExQTG8D9CGtyhtG7RF2WLIgjhOpAjTqPhC6k_66HirlDC7CLIcqBIdlqyimEHqZmUn8w26yRPh7H8dtDOqeN3JMHUIQk4pcD4RVQ-2gH1OX0-Eqto8XwF68sVq__XF5TYKDrE3e2H_v8LN6BjSakuk8Pjzd_Hk56JPlPBvqMKJwxYcn5IUgNGYE75byJnghVolzz3VI8sRRozIFm7SqhMRRbqYlyUbubN0Mg0HFqAiiE9FeGgbFT9rxIlBW8_wGfRBlAE0Z6oOPLFT9m6II5poW2b2AYiIGfq2ztwlcCrV0l_CSFfQAjtEz5xpBoaZCCLGl_L-NAfVUP2aEjiR2RB9d_lPEdnwrPp0-2BcVRe9IF_CWpsWEKFfsEhuRmnb5zke0Pp0Q66jp3T4DLSyPfLyRKKVKRT2oYhVnMW64vKYoYM_oiUxX5gPOwCzzx1Oxp0G-OaQ3xw-wuxZ6WHdy1AB5Nq64JYEyrbvNKrq-D5nE6hAXFLX-I1mHsgJAUOIejjd90artRui49ZT5tVWVe-rqhgErzSvw7iE3DgJ4z6UsMOpmMNyzwrEY", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "869512-ab50-4f64-9ad0-2e5a859954", "record_id": "flaws_cloudtrail:0000033:869512-ab50-4f64-9ad0-2e5a859954", "row_index": 33, "timestamp": "2018-04-16T09:21:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "869512-ab50-4f64-9ad0-2e5a859954", "eventTime": "2018-04-16T09:21:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc5d49f4-9bbb-43cc-910b-1fb524d78700", "record_id": "flaws_cloudtrail:0000034:fc5d49f4-9bbb-43cc-910b-1fb524d78700", "row_index": 34, "timestamp": "2018-04-16T09:21:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1271, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc5d49f4-9bbb-43cc-910b-1fb524d78700", "eventTime": "2018-04-16T09:21:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe06d3f3-073a-49cf-90d8-c855f41e7d79", "record_id": "flaws_cloudtrail:0000035:fe06d3f3-073a-49cf-90d8-c855f41e7d79", "row_index": 35, "timestamp": "2018-04-16T09:21:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1274, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe06d3f3-073a-49cf-90d8-c855f41e7d79", "eventTime": "2018-04-16T09:21:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f53eaee5-f879-4ef4-b4a4-fce5ceb089d1", "record_id": "flaws_cloudtrail:0000036:f53eaee5-f879-4ef4-b4a4-fce5ceb089d1", "row_index": 36, "timestamp": "2018-04-16T09:21:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f53eaee5-f879-4ef4-b4a4-fce5ceb089d1", "eventTime": "2018-04-16T09:21:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d032351ce-8b06-4bc2-b746-d520a332a30a", "record_id": "flaws_cloudtrail:0000037:d032351ce-8b06-4bc2-b746-d520a332a30a", "row_index": 37, "timestamp": "2018-04-16T09:21:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d032351ce-8b06-4bc2-b746-d520a332a30a", "eventTime": "2018-04-16T09:21:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25f2b9a2-3a98-4aed-a8b5-394bbd7d88d7", "record_id": "flaws_cloudtrail:0000038:25f2b9a2-3a98-4aed-a8b5-394bbd7d88d7", "row_index": 38, "timestamp": "2018-04-16T09:21:40Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25f2b9a2-3a98-4aed-a8b5-394bbd7d88d7", "eventTime": "2018-04-16T09:21:40Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "018e1017-91e0-4b5f-b575-0c717247c94df", "record_id": "flaws_cloudtrail:0000039:018e1017-91e0-4b5f-b575-0c717247c94df", "row_index": 39, "timestamp": "2018-04-16T09:21:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1932, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "018e1017-91e0-4b5f-b575-0c717247c94df", "eventTime": "2018-04-16T09:21:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: d70VwnAYOWfK01-d6pmUfuMkfDMSgI58kXF6TEIoSKGLVhc_WZ4ppGXG8Zu1mHL8w2ceDXBqmnQYd3Uvqrqqhnd0Q7KrfHre96--jwkQDzXjR6QAZ0CutdqEKGdmsUyS7lhpj6JbPTHAHp2GysdawdubgWLpvSWHVRwcsC8Tsw0_s7o_MheWC2-Greq7-QKM9fK-C5T4nPGI-QgH-4gW5-BLlQV2SVSuP-P6675_PpvP7YiXUPaXDkn2S6nNpVXfKMCF6KPs32iV_VVU5FxsV6JdTJhl1TtkmRhEvsBQPT2O4p9ffz1-xx5di8Lxdn8KILqkUBoH5m-DwH52HNptab4LqgHhr3XlC5Nx6u4zbx3rdj0ir9kksm4eT2YYNDihgDyfGx3qcK-QwXItGKh0GzaThlC46riHeoou_cP5BGPsu2L3u9CqcTpjCTwoznfvcDWn3ZapJwhaAJd7q0DJAmS7l4do2t_OGCxQCifq4jiw2ZBzqLntYPjUBWMh_GliLuwThXM5os8-3MtER6sO7VWe137YratNP0wO17naVKwOkg2ohsqcGwrdYLgVBpGH15_3JnF4MayeFrDkKLDLGjUeu87GpbEoMSSWuoXxck2AKHmKW2ryBWjKJ60dJymJ28r5SgnB10Xj6_pEOTHM5I-x-vSgOI1azPRR", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af1597c2-c85c-48d1-ae60-e4db0b882ff4", "record_id": "flaws_cloudtrail:0000040:af1597c2-c85c-48d1-ae60-e4db0b882ff4", "row_index": 40, "timestamp": "2018-04-16T09:21:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af1597c2-c85c-48d1-ae60-e4db0b882ff4", "eventTime": "2018-04-16T09:21:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c407ae7-7b5e-4000-b684-ff1e0ab4cdcb", "record_id": "flaws_cloudtrail:0000041:0c407ae7-7b5e-4000-b684-ff1e0ab4cdcb", "row_index": 41, "timestamp": "2018-04-16T09:21:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c407ae7-7b5e-4000-b684-ff1e0ab4cdcb", "eventTime": "2018-04-16T09:21:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4835b892-3355-417f-89a8-e889bb81ce99", "record_id": "flaws_cloudtrail:0000042:4835b892-3355-417f-89a8-e889bb81ce99", "row_index": 42, "timestamp": "2018-04-16T09:21:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1928, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4835b892-3355-417f-89a8-e889bb81ce99", "eventTime": "2018-04-16T09:21:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: C7cYPinpv6Blwt95av_T6LbOhHNxP3tzplWZNnYeoLHsjLeSnbM0Hw6Av1_WejNZ92dHw_Ncnn25HlS6_2LQwWlxpwg0MtZclgk8Mlpb9VcDwXGiAsO0rkdHe95mvRzcOPraRyBByz43S94SDwDVez_elN2qDZcE8G-2JhJrtFvacS9zuhD7tx1C1rwAfFvQlf0c6MkQjUGVNO2k3Q6ZExFzCsN49l9ghUg8MWD0oRLiQ_adc0IJ5q4bhFF6JclfhFNK5Cfda8sGRgxjfXpzeKlhdPUXcgYRVY5101zXZ_yCSds1Do9IsASeeN1MTaVIBnTan5IiR38s_1xzAm2zX0Plww5d5olwKSNtSZvTeqWboG9L77opvWvg0Gh7Q8HdxUrhjq2xloVaAMA2UQEdS_6gcLfLcAWSgEtTY4xAMACylbOEnnHX5MaggvmejD8WrdkHqd_-x_KjYBvRPe3005tmX4RUSmJclsbEYazFspI2P5OEcxwaDgumH53MdxPoUQiPsMSntUNaKlodQbjZQLWTY4jdejk3Mvme_ceDhFSNfNs4tvAmQnRqkmvQN_fAuVYut6eceKCjG2VrIoQ9cv5ySswmjCjQNTUk92IdAGTopmnG6LEn2OZ-03-hAHuCwT_jjTzstj85LNKNDUUQ3mzQPJIEoDoWYDw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b15ddd74-e95d-48a4-a2c7-38f1c315e3c6", "record_id": "flaws_cloudtrail:0000043:b15ddd74-e95d-48a4-a2c7-38f1c315e3c6", "row_index": 43, "timestamp": "2018-04-16T09:21:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b15ddd74-e95d-48a4-a2c7-38f1c315e3c6", "eventTime": "2018-04-16T09:21:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f28318-ac2e-48f7-8b09-1f4f282f5a12", "record_id": "flaws_cloudtrail:0000044:1f28318-ac2e-48f7-8b09-1f4f282f5a12", "row_index": 44, "timestamp": "2018-04-16T09:21:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1925, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f28318-ac2e-48f7-8b09-1f4f282f5a12", "eventTime": "2018-04-16T09:21:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: a5ccI50Qv2zppdkbGf9OVbJUxPNlc1d8Mo0WsjJs25IxT85BfaMerBFDWV1bDaR3_w3Kk9UsmcSBL1pmFOr1I7u3lYrq9g152qAE1cC68LS-59k3qn0WNM7hLBvA62LqCulsufCu74xfHztfYbbBVY97wtn5jDyosRyA7nN_IKEPaj_namKFK-OxwDxI_gjV9l-t7AR3nUVc_cGdwty64aG3aveAVMP7KG5XPIEbGLpD51-flVOXnGUUIXdt59j9uB3mDAp7-P3Kwro_Be707apTcQdjSFcC8JgSuZzI5kdqEOZPJhM_cAOYwUgYCfJVFYFyqkuGEu54XAiWKR_n_sEYBEB2tEX4FpyHrJ__V0IXTe3csAlTp_iVkyl2ycLi7lxqJAou6flWA9kfsUzQKpFhbfeH00avU5oQ8q0v2aETlyCZWXgNJiK1DgBc3WLxuyO5eJ78I9XeKp9Fq-FhNTfrSFO7sHRQkDNd_s42lK4S-HheZ8hPycOCTUu0-sGS13VokJ4FAocyVheXNgOXc7AyLIJ_na6542Kmz4hiq532PADdsTFVfSchEqx6E2TEL3flaDZnkZizkW-dJ-NmqmMYmilSQZXb-m3i869ahL47rgAGKbzGUxmV6JNTZhmJ-mNH4VCmKkR_bEiEIOP3fer-4OcN2RfDzQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afea09f0-fa49-49fd-bfd8-1c446a6b0cf0", "record_id": "flaws_cloudtrail:0000045:afea09f0-fa49-49fd-bfd8-1c446a6b0cf0", "row_index": 45, "timestamp": "2018-04-16T09:21:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afea09f0-fa49-49fd-bfd8-1c446a6b0cf0", "eventTime": "2018-04-16T09:21:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "101f7980-49fe-4b20-b32b-3d3d556ba365", "record_id": "flaws_cloudtrail:0000046:101f7980-49fe-4b20-b32b-3d3d556ba365", "row_index": 46, "timestamp": "2018-04-16T09:21:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "101f7980-49fe-4b20-b32b-3d3d556ba365", "eventTime": "2018-04-16T09:21:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bcba0e4-dd90-4563-b81e-39496cd2e425", "record_id": "flaws_cloudtrail:0000047:5bcba0e4-dd90-4563-b81e-39496cd2e425", "row_index": 47, "timestamp": "2018-04-16T09:21:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bcba0e4-dd90-4563-b81e-39496cd2e425", "eventTime": "2018-04-16T09:21:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "102bec80-40a6-429d-ac00-2fd0fec051e0", "record_id": "flaws_cloudtrail:0000048:102bec80-40a6-429d-ac00-2fd0fec051e0", "row_index": 48, "timestamp": "2018-04-16T09:21:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "102bec80-40a6-429d-ac00-2fd0fec051e0", "eventTime": "2018-04-16T09:21:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16e16ea9-d43a-4faf-a431-f699834e6090c", "record_id": "flaws_cloudtrail:0000049:16e16ea9-d43a-4faf-a431-f699834e6090c", "row_index": 49, "timestamp": "2018-04-16T09:21:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1271, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16e16ea9-d43a-4faf-a431-f699834e6090c", "eventTime": "2018-04-16T09:21:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33bd630b-fe13-475d-884f-387c567cd069", "record_id": "flaws_cloudtrail:0000050:33bd630b-fe13-475d-884f-387c567cd069", "row_index": 50, "timestamp": "2018-04-16T09:21:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33bd630b-fe13-475d-884f-387c567cd069", "eventTime": "2018-04-16T09:21:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9af256cd-ed40-455f-9283-094a17451fb9", "record_id": "flaws_cloudtrail:0000051:9af256cd-ed40-455f-9283-094a17451fb9", "row_index": 51, "timestamp": "2018-04-16T09:21:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9af256cd-ed40-455f-9283-094a17451fb9", "eventTime": "2018-04-16T09:21:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e525c42-a7c5-4017-bf80-e4fb69f9bbb5", "record_id": "flaws_cloudtrail:0000052:8e525c42-a7c5-4017-bf80-e4fb69f9bbb5", "row_index": 52, "timestamp": "2018-04-16T09:21:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e525c42-a7c5-4017-bf80-e4fb69f9bbb5", "eventTime": "2018-04-16T09:21:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 9VzkWt0qIM0cFvjOyJSUAWMr1jQhC42rRhhaJ2EV3RTovYYtTxtEwda8fLZ_iPBxhuF0RrfrHAyoICsl1zT6XXXXlawQZK6FZcwxYDc7AdUfQYfFNeKjai0xKFb-iof2RIvVIOPzVD2bSnL7vtn3DwZjh2Q_4vpBS6GfmUDHLyfanhpXNQ-sabuycjIjB1IXU5XDf2hFqxdguw8qp7Swji9INXUe4cn1b3zNpYSTsEQEXlEQsZWUME8_-c5BEqXF9gTadorRfMgTNuwUz6Npao7v6ZkfC-7sKMtZpMtmTlrfCuveev0XEHw5MLd_GVx9jyNh3u5sRHkZ8Rsz17cwjN0X20C-Co6UHNZ-TQ8eCb7rdDKYZLbdo4HrEo4kBvxSQdB97R1hqedzNHBzFTZDpVMkqcHqFdlPaF4_GxF-HI2GE4UxTyD50uXSkZzMORl7GEP9D2lU181wVPq9THqIX0HPyOnYqPGPq7eg8y9BrVu3iTWgz58IF_LnBpmzKdw9ovYuw491GdVo_deVtn9Z-1uaHpwTZwcNCkmF2hdNLt1KRywVdKyG2uuZqOTcSAUBARVyoG4FeiktMRkfACMObQ5CKWsiv5Qq451B2lsDrKWZOmHdHqD2FMxbIWuXNfzuZ-2UoodhSvSzw5DMF9EBRQDkAhP_caUSKg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c376468-e950-4fcf-801c-19edd5af4cfa", "record_id": "flaws_cloudtrail:0000053:c376468-e950-4fcf-801c-19edd5af4cfa", "row_index": 53, "timestamp": "2018-04-16T09:21:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1375, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c376468-e950-4fcf-801c-19edd5af4cfa", "eventTime": "2018-04-16T09:21:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "704c9518-ebae-4a4c-a7af-424e120c63d7", "record_id": "flaws_cloudtrail:0000054:704c9518-ebae-4a4c-a7af-424e120c63d7", "row_index": 54, "timestamp": "2018-04-16T09:21:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1374, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "704c9518-ebae-4a4c-a7af-424e120c63d7", "eventTime": "2018-04-16T09:21:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "726254-ab2a-4d85-bf27-f435cc05a007", "record_id": "flaws_cloudtrail:0000055:726254-ab2a-4d85-bf27-f435cc05a007", "row_index": 55, "timestamp": "2018-04-16T09:21:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1268, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "726254-ab2a-4d85-bf27-f435cc05a007", "eventTime": "2018-04-16T09:21:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03a8c705-8d45-440d-8c42-b30bdc699fd3", "record_id": "flaws_cloudtrail:0000056:03a8c705-8d45-440d-8c42-b30bdc699fd3", "row_index": 56, "timestamp": "2018-04-16T09:21:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03a8c705-8d45-440d-8c42-b30bdc699fd3", "eventTime": "2018-04-16T09:21:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: H_iuKw5yHiAy-l8elT4zoCtDRXi8B53t0CdGv1TOe6kIMiNX1Sr6QmRndfMC4seDwguNjFJYSwgU_HifihSZJJxEkvL4s_iowcrZCzlscRQ1sKjIoKLu3QxUAK24OJGFTK5fawKKUNZQmzaBFhPgV9PF80Zv-fm4QroNLxZTRaQ6jVUKtHHj-RIYYpORlu_6gnS1lX0q7aOXKedFyEvwzt1jieUN8xF5Fm0z7Haq9CObnHq82SKKqPJiWdJmfSIc9HjOYgl3pxZJlfATR9azZlQBsL9-B4c4H5h5k25rOPrEkJCr7a7YHj3vYAW5-XuGN77Wery8xu_U3OMED9UfeeR0Gh6_5P54XjOHWR9jnopyhJocpso8syiZZVrzKQlTdJmmTeRKA-mHqSIAivH9CLfrC_MYAX6GS5xo0tZcKsQ1hrb-2493oHIYALuNy9laZwW4RHkPsgIajdA4XFe0Q-ERLIiAGjwsIMT3q9SvZxpTc8281YnF2ImyOmYuLyWBfEJ9iBZCvV-xfqYDr8fuQThHMoscmqLGVGwy4ARlqcUWW_X__8W8BzlhvCqfn20A3Ey6fOBPmnJXi3gcs13SPOrPCIoIXNKbn582K02i0ZcOHKM6hNFzdh1NFjXIDSQdSYJ_kTrBhVaF2_F-iC7Hj3a8RQrAaCmVKQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10465-7dff-42d6-b94c-4e4c842f6df8", "record_id": "flaws_cloudtrail:0000057:10465-7dff-42d6-b94c-4e4c842f6df8", "row_index": 57, "timestamp": "2018-04-16T09:21:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10465-7dff-42d6-b94c-4e4c842f6df8", "eventTime": "2018-04-16T09:21:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e21bc486-e47b-42b2-a665-93ff8041ba60", "record_id": "flaws_cloudtrail:0000058:e21bc486-e47b-42b2-a665-93ff8041ba60", "row_index": 58, "timestamp": "2018-04-16T09:35:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1489, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e21bc486-e47b-42b2-a665-93ff8041ba60", "eventTime": "2018-04-16T09:35:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAON6JRT2295T55MGV", "expiration": "Apr 16, 2018 3:38:50 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78c7033a-dbdf-4145-ad0a-3003e6c0e35b", "record_id": "flaws_cloudtrail:0000059:78c7033a-dbdf-4145-ad0a-3003e6c0e35b", "row_index": 59, "timestamp": "2018-04-16T10:09:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78c7033a-dbdf-4145-ad0a-3003e6c0e35b", "eventTime": "2018-04-16T10:09:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2a884df-24ae-4c26-8d39-c6e560226da4", "record_id": "flaws_cloudtrail:0000060:a2a884df-24ae-4c26-8d39-c6e560226da4", "row_index": 60, "timestamp": "2018-04-16T10:09:29Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2a884df-24ae-4c26-8d39-c6e560226da4", "eventTime": "2018-04-16T10:09:29Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fd10282-db62-4cf1-aaa8-c7a32bc011a1", "record_id": "flaws_cloudtrail:0000061:7fd10282-db62-4cf1-aaa8-c7a32bc011a1", "row_index": 61, "timestamp": "2018-04-16T10:09:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fd10282-db62-4cf1-aaa8-c7a32bc011a1", "eventTime": "2018-04-16T10:09:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f01239-a7e1-4040-9e7a-3d1d4a285466", "record_id": "flaws_cloudtrail:0000062:9f01239-a7e1-4040-9e7a-3d1d4a285466", "row_index": 62, "timestamp": "2018-04-16T10:09:29Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f01239-a7e1-4040-9e7a-3d1d4a285466", "eventTime": "2018-04-16T10:09:29Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c88be46-dd8b-412b-8232-9be7a4de479c", "record_id": "flaws_cloudtrail:0000063:1c88be46-dd8b-412b-8232-9be7a4de479c", "row_index": 63, "timestamp": "2018-04-16T10:09:30Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c88be46-dd8b-412b-8232-9be7a4de479c", "eventTime": "2018-04-16T10:09:30Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "177085a5a-92ea-4956-89af-603da5b491e6", "record_id": "flaws_cloudtrail:0000064:177085a5a-92ea-4956-89af-603da5b491e6", "row_index": 64, "timestamp": "2018-04-16T10:09:30Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "177085a5a-92ea-4956-89af-603da5b491e6", "eventTime": "2018-04-16T10:09:30Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2a9192f-0dfa-4074-a206-ab7a278454b63", "record_id": "flaws_cloudtrail:0000065:f2a9192f-0dfa-4074-a206-ab7a278454b63", "row_index": 65, "timestamp": "2018-04-16T10:09:31Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 914, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2a9192f-0dfa-4074-a206-ab7a278454b63", "eventTime": "2018-04-16T10:09:31Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca1cf5bf-866e-4178-bb76-85071f7f3495", "record_id": "flaws_cloudtrail:0000066:ca1cf5bf-866e-4178-bb76-85071f7f3495", "row_index": 66, "timestamp": "2018-04-16T10:09:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca1cf5bf-866e-4178-bb76-85071f7f3495", "eventTime": "2018-04-16T10:09:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3a1ecd3-e02a-4041-a8cc-52ef3be0412f", "record_id": "flaws_cloudtrail:0000067:c3a1ecd3-e02a-4041-a8cc-52ef3be0412f", "row_index": 67, "timestamp": "2018-04-16T10:09:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3a1ecd3-e02a-4041-a8cc-52ef3be0412f", "eventTime": "2018-04-16T10:09:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfa54d23-0ab3-406e-9c52-61f507c238b1", "record_id": "flaws_cloudtrail:0000068:bfa54d23-0ab3-406e-9c52-61f507c238b1", "row_index": 68, "timestamp": "2018-04-16T10:09:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfa54d23-0ab3-406e-9c52-61f507c238b1", "eventTime": "2018-04-16T10:09:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbfb6b72-f229-440a-ab02-71f47c0723ed", "record_id": "flaws_cloudtrail:0000069:cbfb6b72-f229-440a-ab02-71f47c0723ed", "row_index": 69, "timestamp": "2018-04-16T10:09:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbfb6b72-f229-440a-ab02-71f47c0723ed", "eventTime": "2018-04-16T10:09:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b267da42-4416-4c97-bcf9-39a50dada3ff", "record_id": "flaws_cloudtrail:0000070:b267da42-4416-4c97-bcf9-39a50dada3ff", "row_index": 70, "timestamp": "2018-04-16T10:09:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b267da42-4416-4c97-bcf9-39a50dada3ff", "eventTime": "2018-04-16T10:09:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3421ed1-160d-4385-bcd7-c168f3b620b4", "record_id": "flaws_cloudtrail:0000071:c3421ed1-160d-4385-bcd7-c168f3b620b4", "row_index": 71, "timestamp": "2018-04-16T10:09:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3421ed1-160d-4385-bcd7-c168f3b620b4", "eventTime": "2018-04-16T10:09:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8b20ce3-cc34-4fe7-ad76-16a420b8478f", "record_id": "flaws_cloudtrail:0000072:f8b20ce3-cc34-4fe7-ad76-16a420b8478f", "row_index": 72, "timestamp": "2018-04-16T10:09:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8b20ce3-cc34-4fe7-ad76-16a420b8478f", "eventTime": "2018-04-16T10:09:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e26f55f9-38b2-4291-93c9-4826fe0a3f76", "record_id": "flaws_cloudtrail:0000073:e26f55f9-38b2-4291-93c9-4826fe0a3f76", "row_index": 73, "timestamp": "2018-04-16T10:09:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e26f55f9-38b2-4291-93c9-4826fe0a3f76", "eventTime": "2018-04-16T10:09:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc4ef550-d22d-422f-bad6-8a9fb2a7047d", "record_id": "flaws_cloudtrail:0000074:dc4ef550-d22d-422f-bad6-8a9fb2a7047d", "row_index": 74, "timestamp": "2018-04-16T10:09:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc4ef550-d22d-422f-bad6-8a9fb2a7047d", "eventTime": "2018-04-16T10:09:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91694e04-7e50-4f29-9b3f-06101791c4bf", "record_id": "flaws_cloudtrail:0000075:91694e04-7e50-4f29-9b3f-06101791c4bf", "row_index": 75, "timestamp": "2018-04-16T10:09:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91694e04-7e50-4f29-9b3f-06101791c4bf", "eventTime": "2018-04-16T10:09:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51a2d5fa-5e9d-435e-ad75-6c5b61720a", "record_id": "flaws_cloudtrail:0000076:51a2d5fa-5e9d-435e-ad75-6c5b61720a", "row_index": 76, "timestamp": "2018-04-16T10:09:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51a2d5fa-5e9d-435e-ad75-6c5b61720a", "eventTime": "2018-04-16T10:09:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39b6b2f2-ffc8-4db0-8960-c1c937c4b44c", "record_id": "flaws_cloudtrail:0000077:39b6b2f2-ffc8-4db0-8960-c1c937c4b44c", "row_index": 77, "timestamp": "2018-04-16T10:09:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39b6b2f2-ffc8-4db0-8960-c1c937c4b44c", "eventTime": "2018-04-16T10:09:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41749bb-10bf-42de-8322-9af762a5021a", "record_id": "flaws_cloudtrail:0000078:41749bb-10bf-42de-8322-9af762a5021a", "row_index": 78, "timestamp": "2018-04-16T10:09:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41749bb-10bf-42de-8322-9af762a5021a", "eventTime": "2018-04-16T10:09:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b8842c1-ed9e-4b84-86ec-848e996433d7", "record_id": "flaws_cloudtrail:0000079:8b8842c1-ed9e-4b84-86ec-848e996433d7", "row_index": 79, "timestamp": "2018-04-16T10:09:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b8842c1-ed9e-4b84-86ec-848e996433d7", "eventTime": "2018-04-16T10:09:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "934288dec-235d-4d10-a260-f670d4461c1a", "record_id": "flaws_cloudtrail:0000080:934288dec-235d-4d10-a260-f670d4461c1a", "row_index": 80, "timestamp": "2018-04-16T10:09:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "934288dec-235d-4d10-a260-f670d4461c1a", "eventTime": "2018-04-16T10:09:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a712d81-0242-4c63-9125-a782e2725c4c", "record_id": "flaws_cloudtrail:0000081:4a712d81-0242-4c63-9125-a782e2725c4c", "row_index": 81, "timestamp": "2018-04-16T10:09:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a712d81-0242-4c63-9125-a782e2725c4c", "eventTime": "2018-04-16T10:09:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88fc275e-8134-4983-b4dd-9ec26cef1038", "record_id": "flaws_cloudtrail:0000082:88fc275e-8134-4983-b4dd-9ec26cef1038", "row_index": 82, "timestamp": "2018-04-16T10:09:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88fc275e-8134-4983-b4dd-9ec26cef1038", "eventTime": "2018-04-16T10:09:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c1226ee-5325-4bea-a1d8-f5eb392436d6", "record_id": "flaws_cloudtrail:0000083:0c1226ee-5325-4bea-a1d8-f5eb392436d6", "row_index": 83, "timestamp": "2018-04-16T10:09:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c1226ee-5325-4bea-a1d8-f5eb392436d6", "eventTime": "2018-04-16T10:09:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d719adb-e80b-4bf6-a2f4-ccf0e71180ff", "record_id": "flaws_cloudtrail:0000084:1d719adb-e80b-4bf6-a2f4-ccf0e71180ff", "row_index": 84, "timestamp": "2018-04-16T10:09:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d719adb-e80b-4bf6-a2f4-ccf0e71180ff", "eventTime": "2018-04-16T10:09:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "836fe175-f882-489d-9a02-540bd454d3ee", "record_id": "flaws_cloudtrail:0000085:836fe175-f882-489d-9a02-540bd454d3ee", "row_index": 85, "timestamp": "2018-04-16T10:09:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1374, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "836fe175-f882-489d-9a02-540bd454d3ee", "eventTime": "2018-04-16T10:09:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5e64ec3-5287-4247-acf6-43528b876ce", "record_id": "flaws_cloudtrail:0000086:a5e64ec3-5287-4247-acf6-43528b876ce", "row_index": 86, "timestamp": "2018-04-16T10:09:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1274, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5e64ec3-5287-4247-acf6-43528b876ce", "eventTime": "2018-04-16T10:09:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9ffa4f1-bd29-4d5f-9abc-92fbea2a4374", "record_id": "flaws_cloudtrail:0000087:d9ffa4f1-bd29-4d5f-9abc-92fbea2a4374", "row_index": 87, "timestamp": "2018-04-16T10:09:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9ffa4f1-bd29-4d5f-9abc-92fbea2a4374", "eventTime": "2018-04-16T10:09:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df011abf-6b2a-4640-97e9-ef395ef083b7", "record_id": "flaws_cloudtrail:0000088:df011abf-6b2a-4640-97e9-ef395ef083b7", "row_index": 88, "timestamp": "2018-04-16T10:09:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df011abf-6b2a-4640-97e9-ef395ef083b7", "eventTime": "2018-04-16T10:09:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "679b3058-3a33-4e8c-8ce7-c3c9cedb44bd", "record_id": "flaws_cloudtrail:0000089:679b3058-3a33-4e8c-8ce7-c3c9cedb44bd", "row_index": 89, "timestamp": "2018-04-16T10:09:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "679b3058-3a33-4e8c-8ce7-c3c9cedb44bd", "eventTime": "2018-04-16T10:09:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68b3d0b0-491f-455b-9e92-b202cab6f223", "record_id": "flaws_cloudtrail:0000090:68b3d0b0-491f-455b-9e92-b202cab6f223", "row_index": 90, "timestamp": "2018-04-16T10:09:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68b3d0b0-491f-455b-9e92-b202cab6f223", "eventTime": "2018-04-16T10:09:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d9c2113-81c6-436d-aafd-406984f4f475", "record_id": "flaws_cloudtrail:0000091:0d9c2113-81c6-436d-aafd-406984f4f475", "row_index": 91, "timestamp": "2018-04-16T10:09:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1927, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d9c2113-81c6-436d-aafd-406984f4f475", "eventTime": "2018-04-16T10:09:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: akBr7nsX4NEutQ3FuzVsWHeTVV4kCL2Sjy4dXH4Yt05meYq1sbz-6Xhjh7OMLmn49bYySohptvHu_aoEw9QzPMS8C97XpgVQ3W5-7sPHVkwE3ZHQIg0aFcyguSBS-4BhfMAGxlguhSNHjqpTiINklSp_DCWFYbKSst94FJS2VsAI6SsjamjdHsS9CN-TlY8PeHz1fS7Ygz9wyTT6c_vVIVYJ2oA3lROXmh0vShoqMf7BC_7sjXVQs3RwC5o_lfwMis9IzFN-W0CqBv3dXBlMmz-GAhNFE5a8GnQ2Bpz6FmOhqDFirUidEj7tJ_cJvfbxE6UrGIZGANaC3FMWGeITCWgeyIqTsAw81Jo78TaCBAd2CzC9Wjuuq4mN7yjXp-8IQmwdkv7E0FoCKcINKX9garxWWjC38T1YIIl3noY6fq-ks3WfxZo_3gLyI9-gc0gk4LZfJlLdaV29vO8XAH7YV64DRQC0tgrrPne9QIdRrgZHPlKlnC--wX43s4j-aiJWz7uOXCeBBgSUDlTZa0eDA-6Ra27i74qK3WUGQg6xj3DaxJcSiuTgScXncC6nKePM2BTiA6jW1Yg4sMZj5hI_kpPMO1nJQFnAkojGfoyTJ58bCETD7Zo_0-OxkblTRl9r6nWXmIdImcMmF1oktw7rupxO8KvJtHpTuxI", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e4917b9-dbde-4814-b0c1-5250dba4e310", "record_id": "flaws_cloudtrail:0000092:7e4917b9-dbde-4814-b0c1-5250dba4e310", "row_index": 92, "timestamp": "2018-04-16T10:09:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e4917b9-dbde-4814-b0c1-5250dba4e310", "eventTime": "2018-04-16T10:09:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: wFk2u_ZZ7FLQa1DUGaXv4h_1SEqRBXB_xclwd2Iy58wjlMPApIU5P12351eU76ANyVBEkw2TwSbeBKQg-NEIOjE4RXyhmnVZEQmfjsz5omwGjUrqk0CwS_qSoNkvUh6n_lzbUhFBgAw0W45u5Q7lPxQBI1nVgb-IHAzW1FpDb9VL4kIC73p5y9WxDTanAZadZg6-kkOmNN4GfnzrKX9CXunpV-I1-mxpuliln17tQxtvm8XyTjTbWOh95_kpqoSHglL5E1HDmfHCdIRa_y5we0FVfDgQMzOKvmEWkVjGTkifPSlSFgM04a_Zwk0YHNAxJCfd6bvcSSzr_4zaG7io4AZp_AAv-Bmi8TwzJW9Vlj0TBRQXlJ0oFstFw7Pk_TdT0VRavdsRX-YvsvHamkjPDFc0gd9doAx-pMzG_WwTgm1poMGEJNeIZQg-rP_1Wh4cDmmDViK8aUTvkjN05uTdy4xzgWydk8ggiE1vvqbL3taJTjIvjGLLVUy7zWaJOVO9Uk9rGgzwkFQymmmd5l7GuauSTnsHG_OSVuM3LEkhUm0TANkjbzTvyniGmm1EIaBwryGl1Rm5gJZsRJuBD8psMPjGALRPWKG2BwUdXAjEON0lhTCl384zcQmiUcJIwpq5iwQDaDnJnPL__Cv_LVUr9kZGbaVuy9-AQBZ4sYY", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80215d21-f2cc-4e30-9567-111c7416e960", "record_id": "flaws_cloudtrail:0000093:80215d21-f2cc-4e30-9567-111c7416e960", "row_index": 93, "timestamp": "2018-04-16T10:09:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80215d21-f2cc-4e30-9567-111c7416e960", "eventTime": "2018-04-16T10:09:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1303e6e-b7dd-421e-907c-59264dbd9a09", "record_id": "flaws_cloudtrail:0000094:f1303e6e-b7dd-421e-907c-59264dbd9a09", "row_index": 94, "timestamp": "2018-04-16T10:09:41Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1303e6e-b7dd-421e-907c-59264dbd9a09", "eventTime": "2018-04-16T10:09:41Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e77c3af-2e04-4293-9405-ae219cf3926b", "record_id": "flaws_cloudtrail:0000095:4e77c3af-2e04-4293-9405-ae219cf3926b", "row_index": 95, "timestamp": "2018-04-16T10:09:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e77c3af-2e04-4293-9405-ae219cf3926b", "eventTime": "2018-04-16T10:09:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d84440bb-ee8e-4cc7-a5c0-c4b51c6b39ad", "record_id": "flaws_cloudtrail:0000096:d84440bb-ee8e-4cc7-a5c0-c4b51c6b39ad", "row_index": 96, "timestamp": "2018-04-16T10:09:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d84440bb-ee8e-4cc7-a5c0-c4b51c6b39ad", "eventTime": "2018-04-16T10:09:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: G2LvGRfqY0pmLTJb_Zh2NcjPDAmsbUVIXnNYIbyH2lJslgOQ1K9-ypNeklttZv-tcPckHAPGgo_Ls-HqPXp6b0WGRuY7B5Abf9QZ0RnZLUZKZirnq9BA5-trVBSdSOAj2V68RAraE9it8gUL4Jbl0o1etcAgIfdXumm1BCwvkdMP8oc3XdZtCcjOziVrpb4-Sr4mXUiRObUlWciQfFb1ylxweX4I4MV7XkTE2r2Zbmc23STT-JCFNySq4hgbrv-maW1kt-mP2hV12HgOaWSyDWMxGBlXddzb2bpqBkVqAxpwdw300EVWDVDz1OOKedpjf84YflZarxBVOE6jfPCCXP2U-qIXwFgA1cDNUJcL1hs-Mo4GmIih4PzO4xbUc1cuzbtTiRTQhwGpRS9RHtT-TvL63hiWEzkAkvEj2W2FdsrDm0v2Id5kDPfvJO3uo9LhZYessnmXe5cpwRnvM0px7ioBLcsGsr0bFi3foJH0g0gnxpqFeyOun2GLnMnrkS1AYjU3tmCOZgku0qgzeFp1Et3d6oXzt_YL29L607AzVGS1Hr3HlLGxXRHvo006GCYmAPpko4OniZ2DDceC7lHz4pDCR9gOFsF4a70yjL7YXpolz3ZGxnb3rMfobe92FHds6hyDIPZfq0ka76aZbC6KlNeCAahoZQUQAA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e0ccb2c-1278-4ff2-a7ff-ab4d847f2089", "record_id": "flaws_cloudtrail:0000097:4e0ccb2c-1278-4ff2-a7ff-ab4d847f2089", "row_index": 97, "timestamp": "2018-04-16T10:09:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e0ccb2c-1278-4ff2-a7ff-ab4d847f2089", "eventTime": "2018-04-16T10:09:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00adde98-fff6-4d6d-86dc-5bbfc5b2ab5d", "record_id": "flaws_cloudtrail:0000098:00adde98-fff6-4d6d-86dc-5bbfc5b2ab5d", "row_index": 98, "timestamp": "2018-04-16T10:09:42Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00adde98-fff6-4d6d-86dc-5bbfc5b2ab5d", "eventTime": "2018-04-16T10:09:42Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14197d30-946b-4341-81dd-e3d492a5f290", "record_id": "flaws_cloudtrail:0000099:14197d30-946b-4341-81dd-e3d492a5f290", "row_index": 99, "timestamp": "2018-04-16T10:09:42Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14197d30-946b-4341-81dd-e3d492a5f290", "eventTime": "2018-04-16T10:09:42Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "865e130d-4cfa-4115-9a61-0e80845ea9e", "record_id": "flaws_cloudtrail:0000100:865e130d-4cfa-4115-9a61-0e80845ea9e", "row_index": 100, "timestamp": "2018-04-16T10:09:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "865e130d-4cfa-4115-9a61-0e80845ea9e", "eventTime": "2018-04-16T10:09:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ff9d464-73fb-4ac2-8913-3d4cbd6ba650", "record_id": "flaws_cloudtrail:0000101:4ff9d464-73fb-4ac2-8913-3d4cbd6ba650", "row_index": 101, "timestamp": "2018-04-16T10:09:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ff9d464-73fb-4ac2-8913-3d4cbd6ba650", "eventTime": "2018-04-16T10:09:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dIFLVYbn0Sc91-dLhTZZ9E5-INdfTABQ2_pTkS0rs_0IfaABDgC4AIaPSS7OCB9Qo2td2HVTVmjrpQfpksW7tsXD9sM31h0evHvHWKEjmatsQmADETyEf_dVc5dZJrywYfALxkJPgiIef_Hmqq3Tda7skvUHuYixlBNfAhFiQ_DpXZwCjrEuqV9YJdujsHsXJDtrEATkaPMjuAos1qK4_kf54441DC1ClbF5JvKrrrLFaP6-b4VbaRq9zsOD6OfFdL6boD2YsY0UnENMUPsUMqILvCzHDCjGVLvHbm2SAo1ERlMJQfD0bb_UQDUFPxFhbL9R8xOyoDwA-U91KajRMYa5r8PVmpF_SNYaxcdP_cNgkRjT0aEkZ0vKhtyMYGUFv7vrNxXhIhX41DAoKcVLv04tBOSvpFjY5kLNM9hQ3RiURZ_dJmoJ1TYlDu3guz3jrUL3qnSGe3_fLzK9VJ_yMIbcHWwTilygkGvwx1DS6ICdVo4W4WWXJOYKLSuP7Ah6y39ysN4U-TnK09RIXnGSUDbje6ncWAu3d7aNHpD5xuqYNTDDDy4Fx1NTTMjQVyXXYQUissy2za9ZKqfVsyOk0eM7s5phZPjzuutiorYhaT5CrBE87G5IAKhL5kplmxTvJu57UA57FWK7sPGFPbAWWBij4GBbUEXgaw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b41a4371-3865-45b3-b360-9a7b73621da", "record_id": "flaws_cloudtrail:0000102:b41a4371-3865-45b3-b360-9a7b73621da", "row_index": 102, "timestamp": "2018-04-16T10:09:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b41a4371-3865-45b3-b360-9a7b73621da", "eventTime": "2018-04-16T10:09:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e7468a6-508c-4720-8edb-168d0aa53df3", "record_id": "flaws_cloudtrail:0000103:7e7468a6-508c-4720-8edb-168d0aa53df3", "row_index": 103, "timestamp": "2018-04-16T10:09:45Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 906, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e7468a6-508c-4720-8edb-168d0aa53df3", "eventTime": "2018-04-16T10:09:45Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36c78cea-2bf6-492d-85b9-f5f9788a6c04", "record_id": "flaws_cloudtrail:0000104:36c78cea-2bf6-492d-85b9-f5f9788a6c04", "row_index": 104, "timestamp": "2018-04-16T10:09:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36c78cea-2bf6-492d-85b9-f5f9788a6c04", "eventTime": "2018-04-16T10:09:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d17f8046-665a-49cd-a442-76242df9897", "record_id": "flaws_cloudtrail:0000105:d17f8046-665a-49cd-a442-76242df9897", "row_index": 105, "timestamp": "2018-04-16T10:09:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d17f8046-665a-49cd-a442-76242df9897", "eventTime": "2018-04-16T10:09:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38797b-1ea9-46f7-bbc3-384228b0486a5", "record_id": "flaws_cloudtrail:0000106:38797b-1ea9-46f7-bbc3-384228b0486a5", "row_index": 106, "timestamp": "2018-04-16T10:09:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38797b-1ea9-46f7-bbc3-384228b0486a5", "eventTime": "2018-04-16T10:09:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3e631bb-a011-4099-bf2c-d88d5592e077", "record_id": "flaws_cloudtrail:0000107:c3e631bb-a011-4099-bf2c-d88d5592e077", "row_index": 107, "timestamp": "2018-04-16T10:09:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3e631bb-a011-4099-bf2c-d88d5592e077", "eventTime": "2018-04-16T10:09:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Q6XcrMrULQXwd4sOz0dFgVb7vHhejqZamNSara-kl5MsCs5SQQ6MtWpN1OVcmioLD8V_ej3q-SaGZotelKCqSxmpHqZTnBE08XOPkx3i8k-_9QnS6SjH2f0WLkS7UGFR2Cwd-iZOKVZWTwwetP41SVrD6QjcBWOrXhIvVVFQR_j0lay0co-vF6B1StulhH47nTThhPaNL9BY2jHoqOh123Lre3IbN7jOguwPJ9OKieqKbrB2qGfY1qMv02bpr-sF5WHoWoNlUhBGKAmIoUvpbdA5oVu1Nx8RmmAKfQLcL6fb2ltEqmdXl9rIQtWOXc3wFSG4TomFPVeA-tYdnOK0OeEneGNDNGeLBITgvNh-ZHnpgStBH_pNNUItoM-E-X4ySvvfEqJrTkucB7FVeORy4QcTdEU_M4WqLrnyBEtNRcJpASxCA9Yxfgs_cMUiHO9ZsgUrmeA0AUkJBJ9O-H7iiBR3NrZZRaGl2sj5tA2xVSZGzu2uNFespG29TqMecPdTLuugTlwf6l_Mzdh5PCyiO7F4OahlnVe4mVtGYZuBITA0oIFuKj8VYI9puAcxitr5Y9XCESv9pydRELt5QgF4CB0revMz_qU2zNvZfmbBLzgQMuZba4YsOlhw3j-RfIb6t3qFDK_X9yFNwZyBQLmOf4V0ZZMPMD-RrlEAjUls", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ee0d56a-1a42-48c2-8405-b34aef3cc14c", "record_id": "flaws_cloudtrail:0000108:0ee0d56a-1a42-48c2-8405-b34aef3cc14c", "row_index": 108, "timestamp": "2018-04-16T10:09:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ee0d56a-1a42-48c2-8405-b34aef3cc14c", "eventTime": "2018-04-16T10:09:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ded48dec-1484-4470-b930-245ceb8e704f", "record_id": "flaws_cloudtrail:0000109:ded48dec-1484-4470-b930-245ceb8e704f", "row_index": 109, "timestamp": "2018-04-16T10:09:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ded48dec-1484-4470-b930-245ceb8e704f", "eventTime": "2018-04-16T10:09:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f24aff32-b12e-4624-b60d-bf6698f125fc", "record_id": "flaws_cloudtrail:0000110:f24aff32-b12e-4624-b60d-bf6698f125fc", "row_index": 110, "timestamp": "2018-04-16T10:09:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f24aff32-b12e-4624-b60d-bf6698f125fc", "eventTime": "2018-04-16T10:09:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32f83725-a0f1-4f6e-b090-92ff8be8cbd5", "record_id": "flaws_cloudtrail:0000111:32f83725-a0f1-4f6e-b090-92ff8be8cbd5", "row_index": 111, "timestamp": "2018-04-16T10:09:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1378, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32f83725-a0f1-4f6e-b090-92ff8be8cbd5", "eventTime": "2018-04-16T10:09:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0614a3c1-1181-4fde-a514-8ec9485c50bc", "record_id": "flaws_cloudtrail:0000112:0614a3c1-1181-4fde-a514-8ec9485c50bc", "row_index": 112, "timestamp": "2018-04-16T10:09:48Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0614a3c1-1181-4fde-a514-8ec9485c50bc", "eventTime": "2018-04-16T10:09:48Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec62f1c0-63c9-43bf-8b74-69f8699f9101", "record_id": "flaws_cloudtrail:0000113:ec62f1c0-63c9-43bf-8b74-69f8699f9101", "row_index": 113, "timestamp": "2018-04-16T10:09:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec62f1c0-63c9-43bf-8b74-69f8699f9101", "eventTime": "2018-04-16T10:09:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c190b135-83df-475e-a27d-9f2f15355ee4", "record_id": "flaws_cloudtrail:0000114:c190b135-83df-475e-a27d-9f2f15355ee4", "row_index": 114, "timestamp": "2018-04-16T10:09:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c190b135-83df-475e-a27d-9f2f15355ee4", "eventTime": "2018-04-16T10:09:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53521ef2-8156-48a4-aad0-2d5bd04dc6d8", "record_id": "flaws_cloudtrail:0000115:53521ef2-8156-48a4-aad0-2d5bd04dc6d8", "row_index": 115, "timestamp": "2018-04-16T10:09:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53521ef2-8156-48a4-aad0-2d5bd04dc6d8", "eventTime": "2018-04-16T10:09:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a4050c3-4055-456b-9edc-bee7bf7fea63", "record_id": "flaws_cloudtrail:0000116:2a4050c3-4055-456b-9edc-bee7bf7fea63", "row_index": 116, "timestamp": "2018-04-16T10:09:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1273, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a4050c3-4055-456b-9edc-bee7bf7fea63", "eventTime": "2018-04-16T10:09:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72674b1-0644-4a9c-b829-0f0e009f23c8", "record_id": "flaws_cloudtrail:0000117:72674b1-0644-4a9c-b829-0f0e009f23c8", "row_index": 117, "timestamp": "2018-04-16T10:09:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72674b1-0644-4a9c-b829-0f0e009f23c8", "eventTime": "2018-04-16T10:09:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dfc7ede-f5aa-4837-8c39-a3db069abb4e", "record_id": "flaws_cloudtrail:0000118:5dfc7ede-f5aa-4837-8c39-a3db069abb4e", "row_index": 118, "timestamp": "2018-04-16T10:09:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dfc7ede-f5aa-4837-8c39-a3db069abb4e", "eventTime": "2018-04-16T10:09:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c2717eb-2632-4806-be9c-3efc8dba1b61", "record_id": "flaws_cloudtrail:0000119:4c2717eb-2632-4806-be9c-3efc8dba1b61", "row_index": 119, "timestamp": "2018-04-16T10:09:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c2717eb-2632-4806-be9c-3efc8dba1b61", "eventTime": "2018-04-16T10:09:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 60oj8u9ze_hakWpAxLmC2TbCOvfRKg1CV-ajyi7EGlDCFELctjVfD7VQoR9bkvkrh6bGsxi63NJxRCKTjvKiJiKzU0IDEPm8b55QWidCgid5mmvQL_NYXKgkFlL1e-cqSPbG9WdZxctPDUCJ2WC7zCJbWTHblBo2Wzo3TvzH1dmAuDsnb3lpTdPbovUIbw77xYRuAe9jRwDjw-mbMLxJ7b-HiL547FuVwPBjwJpfO7q8wRXjWkLm6T4RMyNTxhQhU7tzHF9MA-y9x4YXjjAwF3nRHFAmvQiP5HThWqV38ykfPmjwPTxqPoiYfcMx7y0fQAY25gV9mLipVFldvJ_iWG4NTk4omZf0VPMnZxbSSVhW6hWdYeseUhTkhPwqJWn5ldM-lIY88uFaK28iZ1DZrnksmN5NXSngv3kbozZ5memUED2eVhuh95GyeaKrtHKmmq9jE5U8O5pobd_v3c0P5rm5TLxD4g2nwm8DSzUo-7VN3bwNSBeBgcSaToaDqcP4j_pVmgxQ_9fl_2W7SomQ3MgLxwGOYDBpz1rWDMg-Up_qM4k_h3sLIlETIr6iHx2m0POkjKQ-sQJAq1PCUVrDsrj08sfwDENSnctQ5I_2RmJY528NjUUGfFVcj1rTzOV7cVaPkXXJkALE4KoHQrzwR-LK4VW1eTvRoEutxA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90464d43-16e1-4cd3-9a8a-49968190cfe2", "record_id": "flaws_cloudtrail:0000120:90464d43-16e1-4cd3-9a8a-49968190cfe2", "row_index": 120, "timestamp": "2018-04-16T10:09:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90464d43-16e1-4cd3-9a8a-49968190cfe2", "eventTime": "2018-04-16T10:09:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efed2578-2459-4ac1-b743-73ad946fdd77", "record_id": "flaws_cloudtrail:0000121:efed2578-2459-4ac1-b743-73ad946fdd77", "row_index": 121, "timestamp": "2018-04-16T10:09:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efed2578-2459-4ac1-b743-73ad946fdd77", "eventTime": "2018-04-16T10:09:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bb83266-1d13-4ad6-8e0a-ab54b8227a59", "record_id": "flaws_cloudtrail:0000122:8bb83266-1d13-4ad6-8e0a-ab54b8227a59", "row_index": 122, "timestamp": "2018-04-16T10:09:53Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bb83266-1d13-4ad6-8e0a-ab54b8227a59", "eventTime": "2018-04-16T10:09:53Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78883a7b-cb57-4474-8eb5-0e3589c293f4", "record_id": "flaws_cloudtrail:0000123:78883a7b-cb57-4474-8eb5-0e3589c293f4", "row_index": 123, "timestamp": "2018-04-16T10:09:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78883a7b-cb57-4474-8eb5-0e3589c293f4", "eventTime": "2018-04-16T10:09:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98d9d72b-30d3-4f4e-8937-a37ee8f332223", "record_id": "flaws_cloudtrail:0000124:98d9d72b-30d3-4f4e-8937-a37ee8f332223", "row_index": 124, "timestamp": "2018-04-16T10:09:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1378, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98d9d72b-30d3-4f4e-8937-a37ee8f332223", "eventTime": "2018-04-16T10:09:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8211bdd5-41e9-490a-bac6-1320a35b51dd", "record_id": "flaws_cloudtrail:0000125:8211bdd5-41e9-490a-bac6-1320a35b51dd", "row_index": 125, "timestamp": "2018-04-16T10:09:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8211bdd5-41e9-490a-bac6-1320a35b51dd", "eventTime": "2018-04-16T10:09:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4cfc980-5957-4c78-8a5a-d79dfa7803e0", "record_id": "flaws_cloudtrail:0000126:d4cfc980-5957-4c78-8a5a-d79dfa7803e0", "row_index": 126, "timestamp": "2018-04-16T10:09:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4cfc980-5957-4c78-8a5a-d79dfa7803e0", "eventTime": "2018-04-16T10:09:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc741d24-fe2d-41e3-812e-015ea73ddd84", "record_id": "flaws_cloudtrail:0000127:cc741d24-fe2d-41e3-812e-015ea73ddd84", "row_index": 127, "timestamp": "2018-04-16T10:09:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc741d24-fe2d-41e3-812e-015ea73ddd84", "eventTime": "2018-04-16T10:09:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "706171ec6-24e7-4d6e-8558-dd466275df", "record_id": "flaws_cloudtrail:0000128:706171ec6-24e7-4d6e-8558-dd466275df", "row_index": 128, "timestamp": "2018-04-16T10:09:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "706171ec6-24e7-4d6e-8558-dd466275df", "eventTime": "2018-04-16T10:09:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bd260b8-f76a-4af8-b274-b1a9832d74d4", "record_id": "flaws_cloudtrail:0000129:3bd260b8-f76a-4af8-b274-b1a9832d74d4", "row_index": 129, "timestamp": "2018-04-16T10:09:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1374, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bd260b8-f76a-4af8-b274-b1a9832d74d4", "eventTime": "2018-04-16T10:09:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afc96abe-c505-4579-b72d-529460148a7f", "record_id": "flaws_cloudtrail:0000130:afc96abe-c505-4579-b72d-529460148a7f", "row_index": 130, "timestamp": "2018-04-16T10:09:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1925, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afc96abe-c505-4579-b72d-529460148a7f", "eventTime": "2018-04-16T10:09:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: gxtmOh7F3iUDxKA6aCHmY81BVNFEXOoNWKX3nmDJBgIqoR8ZdIKvNDn3veP8eZWRvJFaBmG0vXrObgb7SLMhlUtIEEX5SL4KpTNbs8jQEeknOhiBMv16MS2ZpyuvwfPm0kAeMQY58zAueq7bp9pAjHxL9CLCAkaLRwufy694jRt2C8mk9SyZ7ElJONwG0K3_LU8AWAwTdZVBs6PTKCQtEmLTdn8g14GWhaCgfDI1VcICdFeTQbb-nDur50dP1TOKVn7G1-ZCt5FKWjEWx90GaPoSl8yTHYzEq4bJv-D43jDMz4b1BZlX6qGQhD5ge2lEReE6aktrKsatwQqwRpb0306YGPVuEKA3tZgOV294Ywm4pl6ljRMdaw8osNmY6_qzYucrxxRd-yVqOtJUBUOhEBVoQ4BE2nx6PH5kRfREPF3-njM4y89tq4soac7KDvYO9t1xs99L-kR2iHGzvF2GAnwX89ohX4tj7stXAETytl1fSQnVIiPr981DLJ7zEEPCCXVwTHP5oabe4vW0RwCocV1zg6WHmX-Rou-xXX0aqZHyrbCWoirsNHzDIiwGPdtSIjT6QbL9CUZiyA4USWWJPYZ0pW7FLouZz5GFdXB1qO5SRrUTRbUBreGll9nCQPHNvZBJ5AEn-lQyyrQ-MB4_crLMToyt3MFzjyw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "959ceba3-9ff0-4913-a048-731f49cdf404", "record_id": "flaws_cloudtrail:0000131:959ceba3-9ff0-4913-a048-731f49cdf404", "row_index": 131, "timestamp": "2018-04-16T10:09:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "959ceba3-9ff0-4913-a048-731f49cdf404", "eventTime": "2018-04-16T10:09:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d204ef5-d4ab-4e91-b306-53994d48b593", "record_id": "flaws_cloudtrail:0000132:7d204ef5-d4ab-4e91-b306-53994d48b593", "row_index": 132, "timestamp": "2018-04-16T10:09:57Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d204ef5-d4ab-4e91-b306-53994d48b593", "eventTime": "2018-04-16T10:09:57Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d631126-df77-4ef7-a732-650556a0badd5", "record_id": "flaws_cloudtrail:0000133:d631126-df77-4ef7-a732-650556a0badd5", "row_index": 133, "timestamp": "2018-04-16T10:09:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d631126-df77-4ef7-a732-650556a0badd5", "eventTime": "2018-04-16T10:09:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99feeb29-e0c8-499b-9780-ee546969e3dcc", "record_id": "flaws_cloudtrail:0000134:99feeb29-e0c8-499b-9780-ee546969e3dcc", "row_index": 134, "timestamp": "2018-04-16T10:09:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99feeb29-e0c8-499b-9780-ee546969e3dcc", "eventTime": "2018-04-16T10:09:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6023f945-aee2-4f73-bde8-40c96fb0a9f2", "record_id": "flaws_cloudtrail:0000135:6023f945-aee2-4f73-bde8-40c96fb0a9f2", "row_index": 135, "timestamp": "2018-04-16T10:09:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6023f945-aee2-4f73-bde8-40c96fb0a9f2", "eventTime": "2018-04-16T10:09:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94936-ed01-49f8-877e-a99e68857de7", "record_id": "flaws_cloudtrail:0000136:94936-ed01-49f8-877e-a99e68857de7", "row_index": 136, "timestamp": "2018-04-16T10:09:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1923, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94936-ed01-49f8-877e-a99e68857de7", "eventTime": "2018-04-16T10:09:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LzQ9lqBqX0jhnt8sffSvPUEduz0Vx70FKAV8IklTsynca5kS1tSxAnHbgvzFC9lKPmu1JcihmF5aUxAZFFMAgxofBplbPpnHbyMoXpPgwAEyEvfb9EPbIJ1ghF89mVlRltxV3TTLn510Ys8gT-Pkrt_jLHyuo_dvwOmqGTLctQRQRma-bfVb2LeAGqiDGC_udjPvtCapOEEdb7Znx6EYdg835bu1KesFTlHjCtcFpEFZelf2raqNcY0nFn6-QmRyndMaiTZqOgEaatAdf0DDhOITPpGQ7dzWswbPdMH7IdQYYikLxJo7SBJ88qvzNTPCOb8AOGXqSBWpR9ssAYWredBpt0sp4IBmE9dkszY2G5d09uQ81f0fcvVED75epN3gwxFhcAfwYjB2R01tVFt6goCvNjcdORhTfWTfZCbgZtgp9hfoPleUyt25V4C2ohCmG8IBA2gbAx7-7riAv0iYq7AUzD0bT-enylmrvVoPB3vaTRw9LzLVF6LpdOBKLvoe64TqkW08egGST5liAwjMLJ7VoLEGRc1D5rV2dMmVR1imh-4a-gGDQAjRhDHLu6XarjLV4VvyZ8-CrXIavke0oVfxINcYepwSWmsNMfFgJOsgFi3ONs9CQQ00vTQw3ryfr7VwP6a2jW3p6hwEf8-346z9cvadIXZA4Q", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d9b142e-a80e-4f72-993e-5c8f2f74b882", "record_id": "flaws_cloudtrail:0000137:0d9b142e-a80e-4f72-993e-5c8f2f74b882", "row_index": 137, "timestamp": "2018-04-16T10:09:59Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d9b142e-a80e-4f72-993e-5c8f2f74b882", "eventTime": "2018-04-16T10:09:59Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99e4aa76-7538-47d9-9185-7a509e1a4bae", "record_id": "flaws_cloudtrail:0000138:99e4aa76-7538-47d9-9185-7a509e1a4bae", "row_index": 138, "timestamp": "2018-04-16T10:10:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99e4aa76-7538-47d9-9185-7a509e1a4bae", "eventTime": "2018-04-16T10:10:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ec674633-a4ee-4226-b19f-6dbfdf060cc7", "record_id": "flaws_cloudtrail:0000139:3ec674633-a4ee-4226-b19f-6dbfdf060cc7", "row_index": 139, "timestamp": "2018-04-16T10:10:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1383, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ec674633-a4ee-4226-b19f-6dbfdf060cc7", "eventTime": "2018-04-16T10:10:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5766c706-9033-423b-b11b-1aaae6419e4b", "record_id": "flaws_cloudtrail:0000140:5766c706-9033-423b-b11b-1aaae6419e4b", "row_index": 140, "timestamp": "2018-04-16T10:10:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5766c706-9033-423b-b11b-1aaae6419e4b", "eventTime": "2018-04-16T10:10:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebc8a5b9-e34c-4548-a171-600e56d41cc1", "record_id": "flaws_cloudtrail:0000141:ebc8a5b9-e34c-4548-a171-600e56d41cc1", "row_index": 141, "timestamp": "2018-04-16T10:10:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebc8a5b9-e34c-4548-a171-600e56d41cc1", "eventTime": "2018-04-16T10:10:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee3925bb-642a-4677-aa85-fbd68f81c220", "record_id": "flaws_cloudtrail:0000142:ee3925bb-642a-4677-aa85-fbd68f81c220", "row_index": 142, "timestamp": "2018-04-16T10:10:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1378, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee3925bb-642a-4677-aa85-fbd68f81c220", "eventTime": "2018-04-16T10:10:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb551b82-5906-490e-9193-d2a1f43ffdc5", "record_id": "flaws_cloudtrail:0000143:bb551b82-5906-490e-9193-d2a1f43ffdc5", "row_index": 143, "timestamp": "2018-04-16T10:10:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb551b82-5906-490e-9193-d2a1f43ffdc5", "eventTime": "2018-04-16T10:10:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a5d43a6-6a35-4365-ac45-6f3e1a1bb3da", "record_id": "flaws_cloudtrail:0000144:0a5d43a6-6a35-4365-ac45-6f3e1a1bb3da", "row_index": 144, "timestamp": "2018-04-16T10:10:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a5d43a6-6a35-4365-ac45-6f3e1a1bb3da", "eventTime": "2018-04-16T10:10:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c48d1a5a-caa6-4baa-a73a-28c9bb81a4f1", "record_id": "flaws_cloudtrail:0000145:c48d1a5a-caa6-4baa-a73a-28c9bb81a4f1", "row_index": 145, "timestamp": "2018-04-16T10:10:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c48d1a5a-caa6-4baa-a73a-28c9bb81a4f1", "eventTime": "2018-04-16T10:10:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: rvTQUtBtXsTT7fBkmEcNWxDQKdIsVzsUtqsvFB8O5p442XzQhak651eafRdiFJmZe7aYcwsZpqyuH0HKJLFKfF0ySUpYAqaZxTO9dcgH5jalUfBJgAHk7p0pNpkJxmckfln3Ce6lzXjQhwWidyE4Xc9o0P_hqwdwkhAA8ywnfXdMZI4-PfGhPVrAMlD0P6RoGMVjrfSDkcRSkchPQuUBN6ipZYXjLLl2_Em0oaBz3qbF57E7ci8y_l5cgSMVgmNtga5pel3jTloz-dulx_Dh0O9kDriMBKCfdf1APY2RFTFRj7Ey75krB9Hr5i8wVZZ5A-fM5qqNGRU6W4yw89lvGmcwfX4OyeNJL2-pUqOlVhgaW1CICMvQNrinhnQOVNeH3XAsPeAtpk0gbEuys1BZvS-m8ICcQl-JXPHHvjKg2jw0zvzpfFHfypVfRhfxglF58KD_5vW2MxRBtppwS3rczq2uJ8xduTnfO5vVD3iP9t8hx20scrr7NMU3r7GTS2bTH63yFr-PlCHHI28TqKyRpbKIB6sJK1AnAWVQv1fHXACQvHRDSxchit3AkmftYV3GiEzZ1YNpZ3Ci6Dx_mRKlfaCdmriF2_Rs3a-bpy-cRU16b7gVZwu6rJ3bPmrTGP7kB6y_3OTw-5MrHX6Zw3o74vKUBsjon590Rm15NdI", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f01d0983-6e32-405f-9af9-6c6ae8e35db8", "record_id": "flaws_cloudtrail:0000146:f01d0983-6e32-405f-9af9-6c6ae8e35db8", "row_index": 146, "timestamp": "2018-04-16T10:10:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f01d0983-6e32-405f-9af9-6c6ae8e35db8", "eventTime": "2018-04-16T10:10:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cdab0cf-4612-4e97-8d77-f913a0ede943", "record_id": "flaws_cloudtrail:0000147:6cdab0cf-4612-4e97-8d77-f913a0ede943", "row_index": 147, "timestamp": "2018-04-16T10:10:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cdab0cf-4612-4e97-8d77-f913a0ede943", "eventTime": "2018-04-16T10:10:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4da0627f-d9f8-4187-8a7d-ab7e54c413d2", "record_id": "flaws_cloudtrail:0000148:4da0627f-d9f8-4187-8a7d-ab7e54c413d2", "row_index": 148, "timestamp": "2018-04-16T10:10:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1271, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4da0627f-d9f8-4187-8a7d-ab7e54c413d2", "eventTime": "2018-04-16T10:10:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f9a1f29-e55f-40b2-b446-b81208f3abc2", "record_id": "flaws_cloudtrail:0000149:1f9a1f29-e55f-40b2-b446-b81208f3abc2", "row_index": 149, "timestamp": "2018-04-16T10:10:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f9a1f29-e55f-40b2-b446-b81208f3abc2", "eventTime": "2018-04-16T10:10:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc00f582-7ef0-466d-9c5c-372eb45cb49e", "record_id": "flaws_cloudtrail:0000150:fc00f582-7ef0-466d-9c5c-372eb45cb49e", "row_index": 150, "timestamp": "2018-04-16T10:10:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc00f582-7ef0-466d-9c5c-372eb45cb49e", "eventTime": "2018-04-16T10:10:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fbf722e-dc0c-436c-98e2-f3f7a64776", "record_id": "flaws_cloudtrail:0000151:3fbf722e-dc0c-436c-98e2-f3f7a64776", "row_index": 151, "timestamp": "2018-04-16T10:10:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fbf722e-dc0c-436c-98e2-f3f7a64776", "eventTime": "2018-04-16T10:10:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e7e48b2-6c2a-48b7-9a28-c6ba03d390721", "record_id": "flaws_cloudtrail:0000152:7e7e48b2-6c2a-48b7-9a28-c6ba03d390721", "row_index": 152, "timestamp": "2018-04-16T10:10:05Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e7e48b2-6c2a-48b7-9a28-c6ba03d390721", "eventTime": "2018-04-16T10:10:05Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f17bec5e-d23c-478f-b069-bb63a53eab9e", "record_id": "flaws_cloudtrail:0000153:f17bec5e-d23c-478f-b069-bb63a53eab9e", "row_index": 153, "timestamp": "2018-04-16T10:10:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f17bec5e-d23c-478f-b069-bb63a53eab9e", "eventTime": "2018-04-16T10:10:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: eAPBl_JkOVdWN1WYvp9Jg55j6Zpn-7UnEMqHKjcJazYdOVY9wD28iCTmF1Yg2evrDQtcNHq-U83dp-8FemcKOyTNSMThgNOlwhTmUeheCsT6OWKxVR9cwJBuewNAZiYO6Su2k_XYs-Uju1ymyW8PiXQRKFZHvwDX615Sui2HpoFZ8xIqIQsR4Tcvu7CLbRHJAOWfFIHhSwRBBG5OZUmSCcOCVNQOS7h4fMTvwAZHHivgTz_iJeXoXtOEATht7iE_0zqtOywqZZILV0t-AOj0TfXeDNOIZg5aKiVQV3cCt3fX-Y9yStxWmTIJXAwEmoX-qKCmaEWp9e1thliD2sC3GiX8P3Z329LJheV63l9ePgfOE6ZlMstgpe60lImevrurwM85GnML-YfZtj9h-Xtlf9d9Vw3cO52LYTbu3cWLu30dEzBg3EG9ZJzRYCQFQ3zul20rRlKfy6SZe-XBPre0augTAamfT6dMnGETYiSl-LQ2ktvm8cjnUYFHO5yUZocXuR6-oTNY8Ropt38NW0Kr56EEcZadmBqWdwshL3_C0A2zpiC7jWCou0VQj4l5Du19CvuC_NjEDZzKkLlV5R77gdyXTzuRGaZPhgJGpfQtWxwNa5i2zXJoEyFOTYHX8ws3uelO_N8avWXBv6VrRzSQbrxEmSZIHu2-LI_B", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bca3212-791c-4f36-8ff8-ef63db208c94", "record_id": "flaws_cloudtrail:0000154:2bca3212-791c-4f36-8ff8-ef63db208c94", "row_index": 154, "timestamp": "2018-04-16T10:10:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bca3212-791c-4f36-8ff8-ef63db208c94", "eventTime": "2018-04-16T10:10:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0280bcee-6c60-474e-bc69-16a0ff66102", "record_id": "flaws_cloudtrail:0000155:0280bcee-6c60-474e-bc69-16a0ff66102", "row_index": 155, "timestamp": "2018-04-16T10:10:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1375, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0280bcee-6c60-474e-bc69-16a0ff66102", "eventTime": "2018-04-16T10:10:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7a3c6c7-b712-4981-86fb-cf492fd46816", "record_id": "flaws_cloudtrail:0000156:f7a3c6c7-b712-4981-86fb-cf492fd46816", "row_index": 156, "timestamp": "2018-04-16T10:10:07Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7a3c6c7-b712-4981-86fb-cf492fd46816", "eventTime": "2018-04-16T10:10:07Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36f7c105-3ab8-4b0d-91de-3b07332c5d77", "record_id": "flaws_cloudtrail:0000157:36f7c105-3ab8-4b0d-91de-3b07332c5d77", "row_index": 157, "timestamp": "2018-04-16T10:10:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1273, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36f7c105-3ab8-4b0d-91de-3b07332c5d77", "eventTime": "2018-04-16T10:10:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63f3bd77-913b-43fc-a401-4d969677ba2a3", "record_id": "flaws_cloudtrail:0000158:63f3bd77-913b-43fc-a401-4d969677ba2a3", "row_index": 158, "timestamp": "2018-04-16T10:10:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63f3bd77-913b-43fc-a401-4d969677ba2a3", "eventTime": "2018-04-16T10:10:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d1b8fa2-fd78-4973-93cc-96f976d315f3", "record_id": "flaws_cloudtrail:0000159:1d1b8fa2-fd78-4973-93cc-96f976d315f3", "row_index": 159, "timestamp": "2018-04-16T10:10:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d1b8fa2-fd78-4973-93cc-96f976d315f3", "eventTime": "2018-04-16T10:10:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: -37fPR0MvInkOijnbzGFv3X_n3cTM7-eu499hoTKuBbDLLLG4lMJfPx0KTwyCARCWhRh6BAqMmBzS90Vuln73C1sS6M8D5kG_5PdRsSJhZ52Oa9BI_PzLLBa32MWFnrTdNXsmYH1ublRSztWBwoezUWnpJf1cqMWDYgsLQO4cjE4sUlOwz80iHwGzGLBYzH6IXo2uPL4YsxqePtsyi1lGWRPv5l5mXchEnhmQfccaLr9RiZBqOGN8N4HfcTVRTiJzblJzQYomvY9ptV2kNSIyB_LPe68dG4YnLf7ipzSxZ6Khc3rbbBZ8hhFF78epK3moyPFXxKW1psIMkHGY7QtrKr4pfz2s-F_-YA0GEYjKukzHEefcpfPeUbanSmj5SvsZy5QAhlUfLKffacyBaxz3dABRofP-Qeg6Af26BjzDoSJQmQdgfrvvtcsV4Ietbk2Cwgs3NL1aP0Y9FkgJPWOz0R7R6HuVEMB3vbTRg0nF9_1NaYK78WXPL4MUCzGV7iOHKZpEoW9tvOoawj61B_wDfiz9pe_F7Fzs3u-betoUyl-iUkyrCYkCllOOOKaICE0I1OF_Diy2bMtU1qTwYs_Ll34N1Npv7e6t0qRRgv0BtEbK-cvyWRno4Hfv2CdPw2NcMm-heJH7RxxGAZcjVzyFZs9bFYnIWTCjUVd7Q", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c576429a-ac04-4ec8-96ae-81e42eb27d85", "record_id": "flaws_cloudtrail:0000160:9c576429a-ac04-4ec8-96ae-81e42eb27d85", "row_index": 160, "timestamp": "2018-04-16T10:10:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1378, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c576429a-ac04-4ec8-96ae-81e42eb27d85", "eventTime": "2018-04-16T10:10:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3802c41f-17c6-466f-a381-f67232fca", "record_id": "flaws_cloudtrail:0000161:3802c41f-17c6-466f-a381-f67232fca", "row_index": 161, "timestamp": "2018-04-16T10:10:09Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3802c41f-17c6-466f-a381-f67232fca", "eventTime": "2018-04-16T10:10:09Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "367867fd0-33d6-4072-81f6-9c552d49b7bb", "record_id": "flaws_cloudtrail:0000162:367867fd0-33d6-4072-81f6-9c552d49b7bb", "row_index": 162, "timestamp": "2018-04-16T10:10:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1927, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "367867fd0-33d6-4072-81f6-9c552d49b7bb", "eventTime": "2018-04-16T10:10:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: EaKPYFbk_nZjesnOQYgFSP8LdnHMj_-jJWxMZpt6uehiBXToGG6yvRdUz4wtNWPDelCA_zTu4WaprURrxt5V5Swjidafj7cEn_tkhpoGyL0OyDQNSvelPpaQDR9cLbLT7vNfrf13UdtKmo0JvIOI-2DTu4yXWM46_tzEHHEEICRDdwFAaX_oePOfMPo6EfDze4cn2r543rNPYyOnSa0y1IXyEhOqKK-V9lQ1Dfgj8xM0Ius7bvcG6eQku12La3k6Dk1WfTtltvaq6WNaFeTBQ_ns3KWcIL0Bwf8O6LWjjtEUMt84NWSVj9QZb_SRu-0Lx7wLCzb5A5BvnkrM1LKkGHZJR9hBC_YoCyamngDL4qg8elwHgk4vF_vSI_a_8wXlM10S8XeOR23mSkMOt290ahlyS_dWBKPJPcAB6Mbvrz5s73QLuSSoQ_rr7TvR24NH8EXmX3AKoxIy8tGtcFZz5_OWod8qdxYE900w02DbiiDWPsy2CyZvSVxtnSqLZ2XzSuzBooipoVMKvdbSeQtavEs69IlRqk44vxJNwxTjgC4E1651GowUjTzaUL_25bIfIwMLUdfwTFwbOrTvGORsUDaVFXhhvpPnBjZCcHm2ugiROXoXTylj1cV8v7HEe7G7sZjxuPgD-xWo8Usvj_AmjTHp158AYX0mkg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "569de897-601b-44b3-9665-bdb220104f0a9", "record_id": "flaws_cloudtrail:0000163:569de897-601b-44b3-9665-bdb220104f0a9", "row_index": 163, "timestamp": "2018-04-16T10:10:10Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "569de897-601b-44b3-9665-bdb220104f0a9", "eventTime": "2018-04-16T10:10:10Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20cc22cb-224b-4730-8723-0308db4196dc", "record_id": "flaws_cloudtrail:0000164:20cc22cb-224b-4730-8723-0308db4196dc", "row_index": 164, "timestamp": "2018-04-16T10:10:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20cc22cb-224b-4730-8723-0308db4196dc", "eventTime": "2018-04-16T10:10:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4040a6b2-b43f-4b23-8577-a24f1b2deb3d", "record_id": "flaws_cloudtrail:0000165:4040a6b2-b43f-4b23-8577-a24f1b2deb3d", "row_index": 165, "timestamp": "2018-04-16T10:10:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4040a6b2-b43f-4b23-8577-a24f1b2deb3d", "eventTime": "2018-04-16T10:10:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04ba9844-d9fb-4b33-bb84-79d70fc6243a", "record_id": "flaws_cloudtrail:0000166:04ba9844-d9fb-4b33-bb84-79d70fc6243a", "row_index": 166, "timestamp": "2018-04-16T10:10:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04ba9844-d9fb-4b33-bb84-79d70fc6243a", "eventTime": "2018-04-16T10:10:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa0187b5-6716-4654-8c2b-ccd714c8cf63", "record_id": "flaws_cloudtrail:0000167:fa0187b5-6716-4654-8c2b-ccd714c8cf63", "row_index": 167, "timestamp": "2018-04-16T10:10:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa0187b5-6716-4654-8c2b-ccd714c8cf63", "eventTime": "2018-04-16T10:10:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4c183cb-a90a-46bf-b072-4ffe97840e1c", "record_id": "flaws_cloudtrail:0000168:a4c183cb-a90a-46bf-b072-4ffe97840e1c", "row_index": 168, "timestamp": "2018-04-16T10:10:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4c183cb-a90a-46bf-b072-4ffe97840e1c", "eventTime": "2018-04-16T10:10:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b50aae2d-b615-484e-8181-e651819b", "record_id": "flaws_cloudtrail:0000169:b50aae2d-b615-484e-8181-e651819b", "row_index": 169, "timestamp": "2018-04-16T10:10:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b50aae2d-b615-484e-8181-e651819b", "eventTime": "2018-04-16T10:10:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "119338cbe-b0fb-4ee7-b2ff-c0e0b282dc23", "record_id": "flaws_cloudtrail:0000170:119338cbe-b0fb-4ee7-b2ff-c0e0b282dc23", "row_index": 170, "timestamp": "2018-04-16T10:10:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1271, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "119338cbe-b0fb-4ee7-b2ff-c0e0b282dc23", "eventTime": "2018-04-16T10:10:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "515534b4c-2937-4065-ad52-ca117fa3910a", "record_id": "flaws_cloudtrail:0000171:515534b4c-2937-4065-ad52-ca117fa3910a", "row_index": 171, "timestamp": "2018-04-16T10:10:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "515534b4c-2937-4065-ad52-ca117fa3910a", "eventTime": "2018-04-16T10:10:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f7a4e6b-a132-4988-92b1-38c27e6da6cd", "record_id": "flaws_cloudtrail:0000172:8f7a4e6b-a132-4988-92b1-38c27e6da6cd", "row_index": 172, "timestamp": "2018-04-16T10:10:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f7a4e6b-a132-4988-92b1-38c27e6da6cd", "eventTime": "2018-04-16T10:10:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9b2c1c4-7b02-4967-bf4f-5d6af535d1b2", "record_id": "flaws_cloudtrail:0000173:e9b2c1c4-7b02-4967-bf4f-5d6af535d1b2", "row_index": 173, "timestamp": "2018-04-16T10:10:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1925, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9b2c1c4-7b02-4967-bf4f-5d6af535d1b2", "eventTime": "2018-04-16T10:10:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 46AWR6mzAwgOVy7bbKdwAwbxzHF38QOycZvrYO5QgCMMdUfKx80M-7jJEmsK1arx6E5E6ou-vMss_Alzafx90De9xOU2tJWOVXgCdK1AnS2U-6Nu1oSHJuZc4GYLO_-kvJW_JV8GSPrwZQaMGrRmGtNfnsZBnPENjQTLP7xgXDGNgWifpYuemMBc2IGIw2AGhk6yTvuS3JDUXbzpeaHGSs2_MsUFWS4kuPwlnW4MrZCyuZM7TJFxELvWyNVpQcMUJDCnhzP9RObyd9-FmcNcl0z-jM7rdR4RPmoQ6TBD9Eu7H5pMBCS0_FefH0ZyjIeDOxJRpLrW3BkJ4v_TkAHxI5jp7HJ327OlYHuGr2tO3upKS1_KvxDbbZYgOAKdkTKQA663EAPbDdJLjbqY59MCEtsOd0TIl0eTG0LQyRo23-CtRuUcmADxE0dUNYl5ryeV8TzIOR64VTIEgOqDf_13IFP53uHypC9pLyV9UmRUnUk_PqG4SxQYwGO_x60cmaubVpSLmtLIvgatm2bh5kOMO-eRwDvArkap7hfrtmAxje0aiaTo-wACUnWkpb0UedXNhcdWfZNb3gmthzgeJnp1VouFAx07V6pkJ4QTcloYVFNHwggJ-PPRAsfqZO2pr_vxQYRGReF3RrJEuGqcTKyjF_DrEeqMv-gMZw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4715d8f7-8b6e-4b28-b8be-2cab73b7fb6f", "record_id": "flaws_cloudtrail:0000174:4715d8f7-8b6e-4b28-b8be-2cab73b7fb6f", "row_index": 174, "timestamp": "2018-04-16T10:10:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1267, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4715d8f7-8b6e-4b28-b8be-2cab73b7fb6f", "eventTime": "2018-04-16T10:10:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a22090b1-e632-42ef-a0e8-d2b40e67ccd3", "record_id": "flaws_cloudtrail:0000175:a22090b1-e632-42ef-a0e8-d2b40e67ccd3", "row_index": 175, "timestamp": "2018-04-16T10:10:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a22090b1-e632-42ef-a0e8-d2b40e67ccd3", "eventTime": "2018-04-16T10:10:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: tIvE5yv8MT60b3pKfWsU3NtHggXvUxlQ9oQEnVRQBBT6sc96Ln8IYZ-B4TBQlrZCZv_K1WCUvLofGzbN1iH9eFkAhngATkNRGkNm9cpwvdm33Bsssc5WsUEqeIPGF1ZnpH4T18QuU7PKe2XLkcIgeLGZtmJlcBR34sZdU6aOLhKWCYJ8rFd3byn6EcXJSoStVZN4UclhiJLuJHW5arX8YHyIf3NNxP6zIWmP_yzehjeFvE0FA_vorrwyMokR8XwteZmJ6NizbBnJ6XEfEpw9M0J1DQymt3FrYQ1nFZ-hCR8_8vV4Ye8L5afi2kgHZsUS1Mitj9ZlJw6GmLCzWLyOrNZ9mMV7tRmpg7tJk7TaJd6m98LX71YstbX2qVyX8EqYC5rc5Xo7W7zxg-8qDaREmT0StjOyvON5bdhUuh9e7T-oGSQytSH-KZY8xL9GTe0jt9jLiHGkjKOfpOS-dgwJjd-M3c_oksnyOABqqdEMiI0L74b7D9OTuEk_tStr7RuzxhvQfdukPtcszXZHtXYrQPhUV90MALpb6DVJ-OwRqsnLCX0BUL8LsoWh5i6mJJMw4zVkWeFVkNwVV37H9-PrvmxTVrcvJa-tXJKRSJq1xWDUD5xKBoYd5ZslzZ_nZj0gkOM_6tJ-s5V0dlKcpERgRImqvUbluOFCiQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a44badc0-d46a-493d-8b0c-8ba3a56e9c50", "record_id": "flaws_cloudtrail:0000176:a44badc0-d46a-493d-8b0c-8ba3a56e9c50", "row_index": 176, "timestamp": "2018-04-16T10:10:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a44badc0-d46a-493d-8b0c-8ba3a56e9c50", "eventTime": "2018-04-16T10:10:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f774300-476c-4eee-8b26-e4f17993d244", "record_id": "flaws_cloudtrail:0000177:f774300-476c-4eee-8b26-e4f17993d244", "row_index": 177, "timestamp": "2018-04-16T10:10:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f774300-476c-4eee-8b26-e4f17993d244", "eventTime": "2018-04-16T10:10:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f49781-c77e-440e-bb0d-7bb49e575baf", "record_id": "flaws_cloudtrail:0000178:9f49781-c77e-440e-bb0d-7bb49e575baf", "row_index": 178, "timestamp": "2018-04-16T10:10:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1380, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f49781-c77e-440e-bb0d-7bb49e575baf", "eventTime": "2018-04-16T10:10:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c5cf5fb-f048-4c17-99ab-053b673f4f0d", "record_id": "flaws_cloudtrail:0000179:8c5cf5fb-f048-4c17-99ab-053b673f4f0d", "row_index": 179, "timestamp": "2018-04-16T10:10:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c5cf5fb-f048-4c17-99ab-053b673f4f0d", "eventTime": "2018-04-16T10:10:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0996b44-0990-4483-b9a5-79b983816ada8", "record_id": "flaws_cloudtrail:0000180:c0996b44-0990-4483-b9a5-79b983816ada8", "row_index": 180, "timestamp": "2018-04-16T10:10:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0996b44-0990-4483-b9a5-79b983816ada8", "eventTime": "2018-04-16T10:10:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 7S5Wx-V8gA3g0tAj3rqktr7NJXnwMv0XC2IpGy5H7vgUZ4av6DtUfsQ06Gaqmu1E1cw79oCc-d1JNVFNq_eHonoIQTzAvcU1dnW-zaT2-1WnrlCGjYroEtMUdjVzNAS_sx_JGMgp2NMxfC0kRjuViLjRThUVJdZbjOutWYAN3Jf4CNPeRZdGgYVcGt7P6fbP5rpRrnH4pvO-JXunc_SzrTgiBgvM1qgNQYY2lDct0y4rMBINWFl_8bX2DvfuqIpxYJJ9YzdKTM2XkJ79AIPJ5cfd1fDZA1E8RAVUB8kbrPbpAL7SMlO2NONfuiEXiK-e9K-AFNCRHiQPRIK97Z5EbGGw1N2y_t2w9CBD-f8C9HwLJ1Cev5v8oWV_RR2pkHEBosS9NVsta3OYgRD_EnnX702AKxXH7pYXW6lQdwR_8H2ukGa8UWpQjovH5dMwjZk5bJglpH5FUQ4cKBkmucBHkAtBzUyj8GZbuQ1uOFaF8c6eOzsK7RY8YzApdEDSR7lbgTupPESHSrO64knPdmv6Ua0BjPWGPrOeSqS_PeZahGXxQCNB3IyYM6GkGte-06maKVvuvgfAc-u9mJwbc_57o8kCfmIJHsz40t9hH-4MAeV-yIa8mVdPEpmGKJ5-ddrCfeYTo9DNuEYbCTcwSjPoZi_ikyJxyfYHcSJiSB8", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62af3f43-a00f-4414-8a26-31a99a2fb2ef", "record_id": "flaws_cloudtrail:0000181:62af3f43-a00f-4414-8a26-31a99a2fb2ef", "row_index": 181, "timestamp": "2018-04-16T10:10:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62af3f43-a00f-4414-8a26-31a99a2fb2ef", "eventTime": "2018-04-16T10:10:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28de3aa0-e25e-474b-9c92-475ea65f16d0", "record_id": "flaws_cloudtrail:0000182:28de3aa0-e25e-474b-9c92-475ea65f16d0", "row_index": 182, "timestamp": "2018-04-16T10:35:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1487, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28de3aa0-e25e-474b-9c92-475ea65f16d0", "eventTime": "2018-04-16T10:35:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVTS6CAIHG713BCJ8", "expiration": "Apr 16, 2018 4:41:16 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cf19e5b-3ee8-4cc9-a9d8-a909cbd5cbae", "record_id": "flaws_cloudtrail:0000183:2cf19e5b-3ee8-4cc9-a9d8-a909cbd5cbae", "row_index": 183, "timestamp": "2018-04-16T10:37:21Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 872, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cf19e5b-3ee8-4cc9-a9d8-a909cbd5cbae", "eventTime": "2018-04-16T10:37:21Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ed6034f-30fe-4a73-a8e9-ed9a6d064d68", "record_id": "flaws_cloudtrail:0000184:1ed6034f-30fe-4a73-a8e9-ed9a6d064d68", "row_index": 184, "timestamp": "2018-04-16T10:37:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ed6034f-30fe-4a73-a8e9-ed9a6d064d68", "eventTime": "2018-04-16T10:37:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "637dad9e-8e7d-4f86-9dab-1226cf71d79d", "record_id": "flaws_cloudtrail:0000185:637dad9e-8e7d-4f86-9dab-1226cf71d79d", "row_index": 185, "timestamp": "2018-04-16T10:37:23Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "637dad9e-8e7d-4f86-9dab-1226cf71d79d", "eventTime": "2018-04-16T10:37:23Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09ca670a-9fdf-4ab8-a619-3b899c2c3b4c", "record_id": "flaws_cloudtrail:0000186:09ca670a-9fdf-4ab8-a619-3b899c2c3b4c", "row_index": 186, "timestamp": "2018-04-16T10:37:23Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09ca670a-9fdf-4ab8-a619-3b899c2c3b4c", "eventTime": "2018-04-16T10:37:23Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76cc1216-dc75-4912-87f3-ab827740ee90", "record_id": "flaws_cloudtrail:0000187:76cc1216-dc75-4912-87f3-ab827740ee90", "row_index": 187, "timestamp": "2018-04-16T10:37:24Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76cc1216-dc75-4912-87f3-ab827740ee90", "eventTime": "2018-04-16T10:37:24Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69fdd659-2011-43d1-9ff1-59a57defd543", "record_id": "flaws_cloudtrail:0000188:69fdd659-2011-43d1-9ff1-59a57defd543", "row_index": 188, "timestamp": "2018-04-16T10:37:24Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69fdd659-2011-43d1-9ff1-59a57defd543", "eventTime": "2018-04-16T10:37:24Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f64cd6f3-f665-4634-a8d5-31d815c355af", "record_id": "flaws_cloudtrail:0000189:f64cd6f3-f665-4634-a8d5-31d815c355af", "row_index": 189, "timestamp": "2018-04-16T10:37:24Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f64cd6f3-f665-4634-a8d5-31d815c355af", "eventTime": "2018-04-16T10:37:24Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27b59a6c-c68e-49ef-b174-38b7c55aac96", "record_id": "flaws_cloudtrail:0000190:27b59a6c-c68e-49ef-b174-38b7c55aac96", "row_index": 190, "timestamp": "2018-04-16T10:37:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27b59a6c-c68e-49ef-b174-38b7c55aac96", "eventTime": "2018-04-16T10:37:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "067f1429-f91d-4322-bca8-98830a89f90a", "record_id": "flaws_cloudtrail:0000191:067f1429-f91d-4322-bca8-98830a89f90a", "row_index": 191, "timestamp": "2018-04-16T10:37:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "067f1429-f91d-4322-bca8-98830a89f90a", "eventTime": "2018-04-16T10:37:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5db92e43-e366-4eff-bfe0-987177a82c02", "record_id": "flaws_cloudtrail:0000192:5db92e43-e366-4eff-bfe0-987177a82c02", "row_index": 192, "timestamp": "2018-04-16T10:37:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5db92e43-e366-4eff-bfe0-987177a82c02", "eventTime": "2018-04-16T10:37:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df67ab9a-c320-4bac-808d-ef93e26a837f", "record_id": "flaws_cloudtrail:0000193:df67ab9a-c320-4bac-808d-ef93e26a837f", "row_index": 193, "timestamp": "2018-04-16T10:37:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df67ab9a-c320-4bac-808d-ef93e26a837f", "eventTime": "2018-04-16T10:37:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ef67a85-6845-4b8f-bd1b-53ce17ed55d2", "record_id": "flaws_cloudtrail:0000194:1ef67a85-6845-4b8f-bd1b-53ce17ed55d2", "row_index": 194, "timestamp": "2018-04-16T10:37:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ef67a85-6845-4b8f-bd1b-53ce17ed55d2", "eventTime": "2018-04-16T10:37:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4496d6af-5514-46e7-bb09-523efdfc81e7", "record_id": "flaws_cloudtrail:0000195:4496d6af-5514-46e7-bb09-523efdfc81e7", "row_index": 195, "timestamp": "2018-04-16T10:37:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4496d6af-5514-46e7-bb09-523efdfc81e7", "eventTime": "2018-04-16T10:37:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d79b8a98-4a99-4cf8-9e7d-2767da22ca61", "record_id": "flaws_cloudtrail:0000196:d79b8a98-4a99-4cf8-9e7d-2767da22ca61", "row_index": 196, "timestamp": "2018-04-16T10:37:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d79b8a98-4a99-4cf8-9e7d-2767da22ca61", "eventTime": "2018-04-16T10:37:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f3ab272-ca27-4d8e-b78f-7a2331de8b56", "record_id": "flaws_cloudtrail:0000197:5f3ab272-ca27-4d8e-b78f-7a2331de8b56", "row_index": 197, "timestamp": "2018-04-16T10:37:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f3ab272-ca27-4d8e-b78f-7a2331de8b56", "eventTime": "2018-04-16T10:37:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8193bc1b-cdc1-4b37-b0e6-c4272ad8f60f", "record_id": "flaws_cloudtrail:0000198:8193bc1b-cdc1-4b37-b0e6-c4272ad8f60f", "row_index": 198, "timestamp": "2018-04-16T10:37:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1269, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8193bc1b-cdc1-4b37-b0e6-c4272ad8f60f", "eventTime": "2018-04-16T10:37:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adac5b6b-c1f3-49a5-b923-e66fc96150", "record_id": "flaws_cloudtrail:0000199:adac5b6b-c1f3-49a5-b923-e66fc96150", "row_index": 199, "timestamp": "2018-04-16T10:37:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adac5b6b-c1f3-49a5-b923-e66fc96150", "eventTime": "2018-04-16T10:37:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "704db487-33e0-4061-b993-904560ac23b9", "record_id": "flaws_cloudtrail:0000200:704db487-33e0-4061-b993-904560ac23b9", "row_index": 200, "timestamp": "2018-04-16T10:37:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "704db487-33e0-4061-b993-904560ac23b9", "eventTime": "2018-04-16T10:37:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f68894e0-aa15-4cac-892d-95d56d4d184a", "record_id": "flaws_cloudtrail:0000201:f68894e0-aa15-4cac-892d-95d56d4d184a", "row_index": 201, "timestamp": "2018-04-16T10:37:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f68894e0-aa15-4cac-892d-95d56d4d184a", "eventTime": "2018-04-16T10:37:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f781457a-5b57-41e5-ac80-dbc171870cf0", "record_id": "flaws_cloudtrail:0000202:6f781457a-5b57-41e5-ac80-dbc171870cf0", "row_index": 202, "timestamp": "2018-04-16T10:37:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f781457a-5b57-41e5-ac80-dbc171870cf0", "eventTime": "2018-04-16T10:37:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32f384b7-4e13-485e-a929-d0fb435583bcf", "record_id": "flaws_cloudtrail:0000203:32f384b7-4e13-485e-a929-d0fb435583bcf", "row_index": 203, "timestamp": "2018-04-16T10:37:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32f384b7-4e13-485e-a929-d0fb435583bcf", "eventTime": "2018-04-16T10:37:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb00f9fd-4a4d-4f27-a683-b906c85b5c42", "record_id": "flaws_cloudtrail:0000204:cb00f9fd-4a4d-4f27-a683-b906c85b5c42", "row_index": 204, "timestamp": "2018-04-16T10:37:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb00f9fd-4a4d-4f27-a683-b906c85b5c42", "eventTime": "2018-04-16T10:37:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae5a549f-e790-4dfd-84da-c86c16cf72d6", "record_id": "flaws_cloudtrail:0000205:ae5a549f-e790-4dfd-84da-c86c16cf72d6", "row_index": 205, "timestamp": "2018-04-16T10:37:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1373, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae5a549f-e790-4dfd-84da-c86c16cf72d6", "eventTime": "2018-04-16T10:37:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90b386e3-f694-42ec-88f5-5e689704c", "record_id": "flaws_cloudtrail:0000206:90b386e3-f694-42ec-88f5-5e689704c", "row_index": 206, "timestamp": "2018-04-16T10:37:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1267, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90b386e3-f694-42ec-88f5-5e689704c", "eventTime": "2018-04-16T10:37:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "560226f5-5d70-49d5-89ed-391235b346c2", "record_id": "flaws_cloudtrail:0000207:560226f5-5d70-49d5-89ed-391235b346c2", "row_index": 207, "timestamp": "2018-04-16T10:37:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "560226f5-5d70-49d5-89ed-391235b346c2", "eventTime": "2018-04-16T10:37:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "183815c0-7a91-4254-a902-9ed14da244686", "record_id": "flaws_cloudtrail:0000208:183815c0-7a91-4254-a902-9ed14da244686", "row_index": 208, "timestamp": "2018-04-16T10:37:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "183815c0-7a91-4254-a902-9ed14da244686", "eventTime": "2018-04-16T10:37:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "802ea6bc-60ff-4169-ad92-4ac66cd9bd10", "record_id": "flaws_cloudtrail:0000209:802ea6bc-60ff-4169-ad92-4ac66cd9bd10", "row_index": 209, "timestamp": "2018-04-16T10:37:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "802ea6bc-60ff-4169-ad92-4ac66cd9bd10", "eventTime": "2018-04-16T10:37:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14afaf4b-7353-45d1-8a4e-88c4204c1f2f", "record_id": "flaws_cloudtrail:0000210:14afaf4b-7353-45d1-8a4e-88c4204c1f2f", "row_index": 210, "timestamp": "2018-04-16T10:37:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1927, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14afaf4b-7353-45d1-8a4e-88c4204c1f2f", "eventTime": "2018-04-16T10:37:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: _ierQypzZPvDkVHb8xaKFOMeeUwdJQEquXh3V4ikkJnL36CR6I1OOAWSzwaMIC0wRK4Nx81lg5qlm8yFI37eqPd9V-5nf1-sZ7RfzmLOLes9lR63QM8KYrRTzxxIs8U_NlTyrmshpJPslRfuMm03ZVMDpja52Q-Y2QWVsoDlUMgmJl4HGqFwoyBtp7ejAEtpMi1KQfTcewEtProREJRpIcaGzw8ehq_kkXigw_cYskc681p2MoYex94GaEzMcatGtvHwT6U7QT6B2tesUWfunGdlsyGTVHArAa4GxI5MSncaXqDDmVGmba4_Da6XGzekuAcV7J_m5pKAXDfljq8sFzvptqTkwxD4SB_Cxyl3VgaIpthJh1jUVC6GXc1SfGbLnAukZjl2YupsypJ7i56mXi0KtcZtdHrDE98_-lpnx03AE6JWKaJFS4DYWDlEpyO1FrDcKxUaAgmR28Vd9z1RHjXsSCnwofVYKc4aFPOqcZkTax3yrL9rP_ZNC6B_pNPxLgr1a80dT6DOVn7yPDgSX-NI7C_Pfm1jNlNaY6Y151K3RUFARZrjztZbP7jdMJz6ki10x-7nphOjdT3B0z3Abtm6lBZevWeBDVOBZhDQcaWx_zmMbgddAYFcBYVTpwZJEYDXRm8FMiig9aHMQBkVXBDDK4wOqEGzbIk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38de69b1-00e9-4e01-90c2-feaf278587", "record_id": "flaws_cloudtrail:0000211:38de69b1-00e9-4e01-90c2-feaf278587", "row_index": 211, "timestamp": "2018-04-16T10:37:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38de69b1-00e9-4e01-90c2-feaf278587", "eventTime": "2018-04-16T10:37:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "901418c-99a5-4bb0-9a4e-1104459aaf11", "record_id": "flaws_cloudtrail:0000212:901418c-99a5-4bb0-9a4e-1104459aaf11", "row_index": 212, "timestamp": "2018-04-16T10:37:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "901418c-99a5-4bb0-9a4e-1104459aaf11", "eventTime": "2018-04-16T10:37:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c72b443-00de-48d1-8255-5f06a0280ede", "record_id": "flaws_cloudtrail:0000213:9c72b443-00de-48d1-8255-5f06a0280ede", "row_index": 213, "timestamp": "2018-04-16T10:37:33Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c72b443-00de-48d1-8255-5f06a0280ede", "eventTime": "2018-04-16T10:37:33Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ce20f70-92ec-4f6e-bc77-836649e5d9a", "record_id": "flaws_cloudtrail:0000214:0ce20f70-92ec-4f6e-bc77-836649e5d9a", "row_index": 214, "timestamp": "2018-04-16T10:37:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1375, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ce20f70-92ec-4f6e-bc77-836649e5d9a", "eventTime": "2018-04-16T10:37:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb73089f-5234-4562-88fd-c663d5fc40d2", "record_id": "flaws_cloudtrail:0000215:bb73089f-5234-4562-88fd-c663d5fc40d2", "row_index": 215, "timestamp": "2018-04-16T10:37:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb73089f-5234-4562-88fd-c663d5fc40d2", "eventTime": "2018-04-16T10:37:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de2f0c69-091b-4269-b4d1-8514b87edc73", "record_id": "flaws_cloudtrail:0000216:de2f0c69-091b-4269-b4d1-8514b87edc73", "row_index": 216, "timestamp": "2018-04-16T10:37:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de2f0c69-091b-4269-b4d1-8514b87edc73", "eventTime": "2018-04-16T10:37:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a38aa960-4cc2-486c-b3ba-573e487d7e11", "record_id": "flaws_cloudtrail:0000217:a38aa960-4cc2-486c-b3ba-573e487d7e11", "row_index": 217, "timestamp": "2018-04-16T10:37:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a38aa960-4cc2-486c-b3ba-573e487d7e11", "eventTime": "2018-04-16T10:37:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e505ea69-bf1c-40de-9b00-5a65f09276ca", "record_id": "flaws_cloudtrail:0000218:e505ea69-bf1c-40de-9b00-5a65f09276ca", "row_index": 218, "timestamp": "2018-04-16T10:37:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e505ea69-bf1c-40de-9b00-5a65f09276ca", "eventTime": "2018-04-16T10:37:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: X_Y3POVyD1W5WZ2X14-eZt8zQdGMRw7bzpeoxlpFg5rnmUPg0718XIMYAzbfpVbgnTdY5NzDXM1RfhVoOI_TakvKvNm3hJ3OJ35h6pOCzI6w2n1mH0t9oFw78WA-nMO52JHKiVUBCIqpmpaMzNm21qDiuF8aDYoVk1REQvYhxVutkNCYhe5MN0pnK9TS7IADgwnP2ci2vKhO7KofcokMKJkgLxa1Ju-YawVWX3T9KwZoL-L23IM_tuCiFS1GxP2R0YSIZ5bH2qom-KF_xo1ejJ_2D3wo-t4bX-87ep12y4aoc4aRybrV0-cfAOWIvG5rFEPOOdJ36_5VhVjSlcnpuwMYH7minMCdEKsTIy0dY03wPPPDV5vVP-nlWJZmhJAVY_bVQIpE-4dRQub8SVXvFgjDdS8KtHx9yBNP9LBvlChuh2pU9Bi3xTWpXXm7VfYLZCBUh2cn2Xvaogmbtko5KOSWoxwmIZywd0aIt4AVnm5cDuxgJhn8f0TWYlmSFQy-FS3ZDuGIopPccQdH41zi0kPIdRE8kAUlrbVKVl5gTus1W01ZqVRrl08Ix8-IVvqttQciUUfES0Y7Ilhab6jRgTcYcQP7lAbqB4M5oO-uAxpdyL6WI3Eywi3nuKvm0DQbg5WbrQGphffdEdKJfIy9WrFtrICRr0KeDA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bde50f79-fdde-4534-8589-a567775c2", "record_id": "flaws_cloudtrail:0000219:bde50f79-fdde-4534-8589-a567775c2", "row_index": 219, "timestamp": "2018-04-16T10:37:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bde50f79-fdde-4534-8589-a567775c2", "eventTime": "2018-04-16T10:37:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "224e0000-0c84-496a-b24f-c7c33a5949a6", "record_id": "flaws_cloudtrail:0000220:224e0000-0c84-496a-b24f-c7c33a5949a6", "row_index": 220, "timestamp": "2018-04-16T10:37:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "224e0000-0c84-496a-b24f-c7c33a5949a6", "eventTime": "2018-04-16T10:37:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25903c6-e72b-49c2-8acb-97caf1b8d0fc", "record_id": "flaws_cloudtrail:0000221:25903c6-e72b-49c2-8acb-97caf1b8d0fc", "row_index": 221, "timestamp": "2018-04-16T10:37:36Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25903c6-e72b-49c2-8acb-97caf1b8d0fc", "eventTime": "2018-04-16T10:37:36Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da1e63a1-0b7f-43dc-8d59-1ffa0d2c085c", "record_id": "flaws_cloudtrail:0000222:da1e63a1-0b7f-43dc-8d59-1ffa0d2c085c", "row_index": 222, "timestamp": "2018-04-16T10:37:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da1e63a1-0b7f-43dc-8d59-1ffa0d2c085c", "eventTime": "2018-04-16T10:37:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd88d18d-1892-4401-8842-d051c160679fb", "record_id": "flaws_cloudtrail:0000223:fd88d18d-1892-4401-8842-d051c160679fb", "row_index": 223, "timestamp": "2018-04-16T10:37:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd88d18d-1892-4401-8842-d051c160679fb", "eventTime": "2018-04-16T10:37:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34c4fe90-d21e-4767-8568-a5b8c18827fd", "record_id": "flaws_cloudtrail:0000224:34c4fe90-d21e-4767-8568-a5b8c18827fd", "row_index": 224, "timestamp": "2018-04-16T10:37:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34c4fe90-d21e-4767-8568-a5b8c18827fd", "eventTime": "2018-04-16T10:37:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "766384a7-b12d-43b0-a50c-fd2b9e0e95d8", "record_id": "flaws_cloudtrail:0000225:766384a7-b12d-43b0-a50c-fd2b9e0e95d8", "row_index": 225, "timestamp": "2018-04-16T10:37:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "766384a7-b12d-43b0-a50c-fd2b9e0e95d8", "eventTime": "2018-04-16T10:37:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Cl8TStZudEdIz7VNaAOYYvhdaD15o_Ut-VxqIv5EQIy7Jc3MqgJe3rBbFCocRnHNgPvIPDWUGeBSOtwgErUwSAgf7GXezy9xnhsK35SpAdFbUV1ZwmDjDgUI84Vx-7EiZW0lb-TOwiIkTdnX6ruMGOeloAq2nUCWxPrd8pxk6_qTSJmMuN701rxI1c8wFgD3i6HAqBzW8aq1WUvAMBvhyK3ACN5uABvfaR3dUE1LuDujVEsHtIlpS3-ITONGTJAUfAPAxF_ZYm2wVs6lneRu-M5y0MXj47gevdW25xvcz1nm922FD6qTC8g420jYbAV4nNvBeklad8rybZzws2vTKzJlN2ieNfqy3_Ru4nUpjMAe6v-_z34ccijOINFw6cAoiQlfFLFCvMN9vnCHqc73FTe4Y6Eh08pQomRELiAU3ENw9G8bCOGwzWyDgdmuYE3Z9j1-MYDpt1XKSPGLPnmTzVpoo1Zy5--f4Vsr6IeiMFNZU5UYOsBt7PyZn9PBF6cxLdTbA8YbSu1PQZPhIqIM2rxQ9npXuIrNVxeHlvhFyRo-PB83wlcisvAmROK-HkqmwC-fXpAQhOd5CJN0ZcClqmjrSVK5Br3aCn9KNbpGQk_QQFTQFZI0T4V2grfZ8RuBNG6KNbwnF4oNFVJtfAb4NpdRNpxlDIU-ss2XVL3n", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f66529a-20d0-4599-a204-2646f6e9fe21", "record_id": "flaws_cloudtrail:0000226:1f66529a-20d0-4599-a204-2646f6e9fe21", "row_index": 226, "timestamp": "2018-04-16T10:37:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f66529a-20d0-4599-a204-2646f6e9fe21", "eventTime": "2018-04-16T10:37:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: bkmhbOkKjdHToaDey3BEDHH6YWEeivVrYQylEGNuMGbZaYyi-9TgmKOAkiyCthiptBBLwMDkZuiKZi21J3prHZBzjPdVVaZds1RCCW0xJ0Wza5RdGigq773883-am4JW-aBEanm_prOX580yT7RhDpTtN4AUmONT3GtgyrntR6DpkYo9VLvtf_Wap4RYxjUtHyPLh41gEtFXFLKUtPdz_MbnpgZxqC2XDSIKHp-dxyAWL-_G7iwxqu9zNkoxfeWORUBNpb4xx5KT0PGAxcCdYaNAjiTEg5XiNlOGjKvbiLp1LaQcO97G1oY6a9V5V9L2ikeNDHyIGLrEl1OOhIZ44W8ScvWoKH5XF5NSSCQvjcRqwPyrF4O5lhDt1Xt82xMhvT4-w9DpqGigIkQmxxqkcxXZHGX1EutZuMzhBX-6-SuZgVlViFyfNjWTpyQjna83ZDU98XcQYNHaOohHB_vXR_mMMZ-Bm_z8zM2djBySe2loPgrf2uDbAWIP9tv-tD3X7JBNeT-2BHF3uoD3Z4OaApeBol56hogHzlqm49MsF-u2Ty03Urs_XSw3w_29klt_aZKl34vqpy-HTaA9MgQ-6w9BSLnrQ0hyf_Aof1I8fEqGliYT-bniRdbA1_byAtnYpSe9CXo1BQXzzAGnz1nZKq7qBOg2F0noePJVxVDc", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55219f1-2dd1-4ced-acb5-af5d06983d", "record_id": "flaws_cloudtrail:0000227:55219f1-2dd1-4ced-acb5-af5d06983d", "row_index": 227, "timestamp": "2018-04-16T10:37:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55219f1-2dd1-4ced-acb5-af5d06983d", "eventTime": "2018-04-16T10:37:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdee73dd-6842-4189-835e-2bfc39003d34", "record_id": "flaws_cloudtrail:0000228:fdee73dd-6842-4189-835e-2bfc39003d34", "row_index": 228, "timestamp": "2018-04-16T10:37:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdee73dd-6842-4189-835e-2bfc39003d34", "eventTime": "2018-04-16T10:37:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: mIJSMZpvxfo5mCuhGL8-DLu0yKRhQaWjw1xY_IY3jO6aDibfaS7cYlpM11GnslDj8-gNLzPAtiiiKts-mNMcsCkNL6eLpkuffBl3bcsLxxaFoUeM-3Po8WD5fdkO7_IgcvBAuL-239aBoUtzyQPZJFkEYiqOXUBNnYywSFunUrTba5qXRxeT9XC_s4hHhE9OK0-FFS87Pnz-6dO7mALxIdEuZlZYYmJRrP6uf5n4RlzaVqYngRuiVuoDmGd0z5rvfSSv3AHRv0pIqf1TR-C41-Bp7_BDPbeild731Gr3dlk9Mb7XZytzi74mcfBxiKQeGiNmqKcxBvdZ5CLS9TuXim2T5loz2tT7fyUYq_eReKJL8gl4cnzmEKHX4wI4eANip3HeNUdS8BrO24EoxpIKdAKkA4ft4gv7NURZxKd-6HwncngEMTfpw6B3P9agyGPZ8y6RO7MhFg0sDcXRp20SvdtEofNw6saKPIN7fHQ3EoLQWLrGIceBI7_WFaAT4NQkBbJc_DMkIhnsQ26X5eOoFWepFghUptU1fAilMU2uW6qATC4fgx1MzlZaejHeCJsErYqh-pEFY3AUJDMI4WRL6Rlv6SbWGG-IW4CIBLv6zZWisGkI5LT_O8WQrJbIGag_B4qSprTUPHbsimS78mIrgFZoDOUJk3ksFA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd478507-5761-40cc-867d-3b997bf3bb1f", "record_id": "flaws_cloudtrail:0000229:cd478507-5761-40cc-867d-3b997bf3bb1f", "row_index": 229, "timestamp": "2018-04-16T10:37:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd478507-5761-40cc-867d-3b997bf3bb1f", "eventTime": "2018-04-16T10:37:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01f4b794-be53-44f7-afcc-e17df4a8bdd5", "record_id": "flaws_cloudtrail:0000230:01f4b794-be53-44f7-afcc-e17df4a8bdd5", "row_index": 230, "timestamp": "2018-04-16T10:37:40Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01f4b794-be53-44f7-afcc-e17df4a8bdd5", "eventTime": "2018-04-16T10:37:40Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8f91ed5-9ffc-4f6a-954e-4e2af8df14f6", "record_id": "flaws_cloudtrail:0000231:a8f91ed5-9ffc-4f6a-954e-4e2af8df14f6", "row_index": 231, "timestamp": "2018-04-16T10:37:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8f91ed5-9ffc-4f6a-954e-4e2af8df14f6", "eventTime": "2018-04-16T10:37:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5dfe1fe-b929-4b3e-b3e1-370ee56ca92c", "record_id": "flaws_cloudtrail:0000232:e5dfe1fe-b929-4b3e-b3e1-370ee56ca92c", "row_index": 232, "timestamp": "2018-04-16T10:37:40Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5dfe1fe-b929-4b3e-b3e1-370ee56ca92c", "eventTime": "2018-04-16T10:37:40Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d68ac1ae-bb9d-473b-91cc-b1c868a7cbba", "record_id": "flaws_cloudtrail:0000233:d68ac1ae-bb9d-473b-91cc-b1c868a7cbba", "row_index": 233, "timestamp": "2018-04-16T10:37:40Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d68ac1ae-bb9d-473b-91cc-b1c868a7cbba", "eventTime": "2018-04-16T10:37:40Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8c2388d-b508-4bc2-a6ba-c1781331b9ee", "record_id": "flaws_cloudtrail:0000234:e8c2388d-b508-4bc2-a6ba-c1781331b9ee", "row_index": 234, "timestamp": "2018-04-16T10:37:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8c2388d-b508-4bc2-a6ba-c1781331b9ee", "eventTime": "2018-04-16T10:37:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec50101e-c112-4117-9ee6-48d450bb3c16", "record_id": "flaws_cloudtrail:0000235:ec50101e-c112-4117-9ee6-48d450bb3c16", "row_index": 235, "timestamp": "2018-04-16T10:37:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec50101e-c112-4117-9ee6-48d450bb3c16", "eventTime": "2018-04-16T10:37:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b92835e-3dfd-4a43-bd5a-16ed4b32a758", "record_id": "flaws_cloudtrail:0000236:5b92835e-3dfd-4a43-bd5a-16ed4b32a758", "row_index": 236, "timestamp": "2018-04-16T10:37:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b92835e-3dfd-4a43-bd5a-16ed4b32a758", "eventTime": "2018-04-16T10:37:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6b929063-29bf-4fcb-b422-6d1debe9b264", "record_id": "flaws_cloudtrail:0000237:f6b929063-29bf-4fcb-b422-6d1debe9b264", "row_index": 237, "timestamp": "2018-04-16T10:37:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1380, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6b929063-29bf-4fcb-b422-6d1debe9b264", "eventTime": "2018-04-16T10:37:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f3435b0-d99c-44ef-812b-9d793a28a508", "record_id": "flaws_cloudtrail:0000238:3f3435b0-d99c-44ef-812b-9d793a28a508", "row_index": 238, "timestamp": "2018-04-16T10:37:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f3435b0-d99c-44ef-812b-9d793a28a508", "eventTime": "2018-04-16T10:37:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4986bd9-3e1b-4aeb-a39c-74ed77b66413", "record_id": "flaws_cloudtrail:0000239:a4986bd9-3e1b-4aeb-a39c-74ed77b66413", "row_index": 239, "timestamp": "2018-04-16T10:37:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4986bd9-3e1b-4aeb-a39c-74ed77b66413", "eventTime": "2018-04-16T10:37:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc9912e3-f8ec-4b7a-9571-bb8fd39bf473", "record_id": "flaws_cloudtrail:0000240:cc9912e3-f8ec-4b7a-9571-bb8fd39bf473", "row_index": 240, "timestamp": "2018-04-16T10:37:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc9912e3-f8ec-4b7a-9571-bb8fd39bf473", "eventTime": "2018-04-16T10:37:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "715a652e-3554-4563-8a1e-13f4cf61ac27", "record_id": "flaws_cloudtrail:0000241:715a652e-3554-4563-8a1e-13f4cf61ac27", "row_index": 241, "timestamp": "2018-04-16T10:37:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "715a652e-3554-4563-8a1e-13f4cf61ac27", "eventTime": "2018-04-16T10:37:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "153668ec-de7f-4c3f-8bec-7be489649dbb", "record_id": "flaws_cloudtrail:0000242:153668ec-de7f-4c3f-8bec-7be489649dbb", "row_index": 242, "timestamp": "2018-04-16T10:37:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "153668ec-de7f-4c3f-8bec-7be489649dbb", "eventTime": "2018-04-16T10:37:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "790946-b7f5-43ed-a826-0100a39a5766", "record_id": "flaws_cloudtrail:0000243:790946-b7f5-43ed-a826-0100a39a5766", "row_index": 243, "timestamp": "2018-04-16T10:37:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "790946-b7f5-43ed-a826-0100a39a5766", "eventTime": "2018-04-16T10:37:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "399837dc-c2f5-4d6e-a0f4-21ad0bbcdd42", "record_id": "flaws_cloudtrail:0000244:399837dc-c2f5-4d6e-a0f4-21ad0bbcdd42", "row_index": 244, "timestamp": "2018-04-16T10:37:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "399837dc-c2f5-4d6e-a0f4-21ad0bbcdd42", "eventTime": "2018-04-16T10:37:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3916ca4-3ecd-4294-9383-ecb2ed440b65", "record_id": "flaws_cloudtrail:0000245:f3916ca4-3ecd-4294-9383-ecb2ed440b65", "row_index": 245, "timestamp": "2018-04-16T10:37:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1273, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3916ca4-3ecd-4294-9383-ecb2ed440b65", "eventTime": "2018-04-16T10:37:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60edc926-ffcf-4d3f-987c-4d68105afb89", "record_id": "flaws_cloudtrail:0000246:60edc926-ffcf-4d3f-987c-4d68105afb89", "row_index": 246, "timestamp": "2018-04-16T10:37:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60edc926-ffcf-4d3f-987c-4d68105afb89", "eventTime": "2018-04-16T10:37:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f01d484e-2b3b-4c3a-9d49-dd19dfe2945a", "record_id": "flaws_cloudtrail:0000247:f01d484e-2b3b-4c3a-9d49-dd19dfe2945a", "row_index": 247, "timestamp": "2018-04-16T10:37:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f01d484e-2b3b-4c3a-9d49-dd19dfe2945a", "eventTime": "2018-04-16T10:37:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 8kTWAIwMbsgKuAdByVwZbl-jPZ4fsqAwid-Nj5eFeLQJTX911vmB14mTnD1cqN7rf9lB3_hWCD9m1J-VfrzJL9kqPHuDhsPmTsZHoPdxSpZJdPglDqjLpKAa_RwFE0I-rpR4Sqie5eGfB0AtmvU6xmQ4Eedttu4jZ3iRAA51UodXDTXIwbmKOMPRyaLJoGRC-OChpUe_gC-xGEVbIl3I6xkfb2lYYLsrxnqZeNr49b1U8p_GeinyrDDgbric-urGwLpV03cnq6NIL2AJdTwNdw-KZ0YKXu-zBXuG3m3st2aeHBglUswsCb8646_mL5jG3BcJYbTp_8soMW-aDDSLEtNzWsrkxm9JjWdG5A3xZLQaE2lNQy66YgzZm78Kyl7OR_6F1qGNFLMbhIjjzyAni6hlzdLy3p_c2VYlfoQ24oRScZPW82EjhtiahesmzHGYDDeRJy7Q37jCrR29bgp3d5Hnenv3mwcq9bOeEdsGBcWdR8G3nIHAqOa0VVZo_igZqu7bAozFYp7nbhVg9a3Cnst-WbA2IDuLwlmUaZVzJkiNnQEjvyn8NKBPg6CKYMP6sooK9iCGbBL1YwKyXAN2ddcHKNH409g1lCQmivDfWkRbSf-IiBHU4uzYCvtJLkE2_YrAuHvIs0Zswyd2_eWz8F9brLbS1_oLR2VIzg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cb1197a-9d97-4605-b24c-837f9b688bb7", "record_id": "flaws_cloudtrail:0000248:4cb1197a-9d97-4605-b24c-837f9b688bb7", "row_index": 248, "timestamp": "2018-04-16T10:37:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cb1197a-9d97-4605-b24c-837f9b688bb7", "eventTime": "2018-04-16T10:37:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18e680ea-d350-4b5e-ab66-4aa6c258d878", "record_id": "flaws_cloudtrail:0000249:18e680ea-d350-4b5e-ab66-4aa6c258d878", "row_index": 249, "timestamp": "2018-04-16T10:37:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18e680ea-d350-4b5e-ab66-4aa6c258d878", "eventTime": "2018-04-16T10:37:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c20915-f99b-4efc-a74f-89ea67f6a3f5", "record_id": "flaws_cloudtrail:0000250:c20915-f99b-4efc-a74f-89ea67f6a3f5", "row_index": 250, "timestamp": "2018-04-16T10:37:48Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c20915-f99b-4efc-a74f-89ea67f6a3f5", "eventTime": "2018-04-16T10:37:48Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "165ce122-8b80-4323-a205-f5c1ed40e391", "record_id": "flaws_cloudtrail:0000251:165ce122-8b80-4323-a205-f5c1ed40e391", "row_index": 251, "timestamp": "2018-04-16T10:37:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1380, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "165ce122-8b80-4323-a205-f5c1ed40e391", "eventTime": "2018-04-16T10:37:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee6c62ea-5076-46ed-8f8b-371e01561fd4", "record_id": "flaws_cloudtrail:0000252:ee6c62ea-5076-46ed-8f8b-371e01561fd4", "row_index": 252, "timestamp": "2018-04-16T10:37:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee6c62ea-5076-46ed-8f8b-371e01561fd4", "eventTime": "2018-04-16T10:37:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25c05d95-a0d6-44cf-801d-8cfabdf65efb", "record_id": "flaws_cloudtrail:0000253:25c05d95-a0d6-44cf-801d-8cfabdf65efb", "row_index": 253, "timestamp": "2018-04-16T10:37:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25c05d95-a0d6-44cf-801d-8cfabdf65efb", "eventTime": "2018-04-16T10:37:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b26777a3-2068-47c6-b8e8-87a97946", "record_id": "flaws_cloudtrail:0000254:b26777a3-2068-47c6-b8e8-87a97946", "row_index": 254, "timestamp": "2018-04-16T10:37:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1373, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b26777a3-2068-47c6-b8e8-87a97946", "eventTime": "2018-04-16T10:37:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15a509f6-27ac-4687-8260-614c16399a", "record_id": "flaws_cloudtrail:0000255:15a509f6-27ac-4687-8260-614c16399a", "row_index": 255, "timestamp": "2018-04-16T10:37:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15a509f6-27ac-4687-8260-614c16399a", "eventTime": "2018-04-16T10:37:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeced5fa-4bef-4abb-a556-fe9ce29899f", "record_id": "flaws_cloudtrail:0000256:aeced5fa-4bef-4abb-a556-fe9ce29899f", "row_index": 256, "timestamp": "2018-04-16T10:37:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1269, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeced5fa-4bef-4abb-a556-fe9ce29899f", "eventTime": "2018-04-16T10:37:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e209d762-da02-4b42-93d8-c050761eb", "record_id": "flaws_cloudtrail:0000257:e209d762-da02-4b42-93d8-c050761eb", "row_index": 257, "timestamp": "2018-04-16T10:37:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e209d762-da02-4b42-93d8-c050761eb", "eventTime": "2018-04-16T10:37:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa808ca6-3351-438c-a29e-a6e077e0dff3", "record_id": "flaws_cloudtrail:0000258:fa808ca6-3351-438c-a29e-a6e077e0dff3", "row_index": 258, "timestamp": "2018-04-16T10:37:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa808ca6-3351-438c-a29e-a6e077e0dff3", "eventTime": "2018-04-16T10:37:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 0qyMfxdjN9ioAocJIcMWBPovTYUbhnqmyc_ui91-0S1THDH1ATTCQcKks2wv68o0EEbqaELVNC-HBx4YNSKOXymDWpIxjM5pyW08oTiJIpSl19eYw_PunK2UuR2Q4bJJ3Rgz2qT-pivrZEPF3B2s7_YIpiyo1O0imQnBQmHwUmd9s2PyWeifsh-Qs2c-eJOUrUFMI8WZuLSwwtbUHl9oRpAPDxICtDCM-XdBUo5dXlpNnvuVD28MrCADK4nn54lskVY99pgyUvRTlP6DKEoZHtRv8spC5WQQHmUkb5Hy62jIFCygelvzs-SeFt99OedhSY90YlbA2-LvvOC-LG0VIqLePlGSZakx9wwFTvwM8ZnjQ3A9w_fhrXX27GJjCWtJMyXfSWtVJRkJTet2-f476gvjd26JFOJF9t_USA80_XyqT6FuJo92hj9ng0bvQkgLYsqpk1hQ0Py61ju9pYzawZ4HdnDYhfU09wzDcFialIw9yvors6HgTsS1l_FFublxa64OA4FsHzqHTUU9J79629wfw2qyzU6j5n_V7UdzCJ9Swcyb52ZdtDg-wdIRsPNGN2MLDQKHPE9YUfHTVRP-flrHa2wh3JjhrWjBjaVOHFEE4-n2zbuOlUd7O3tr4FYyzHI5IyruRCq5aV13NYBksTcDN2AoocVlHw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91a8b99d-ad83-4d68-ba8b-313e6f21d3b8", "record_id": "flaws_cloudtrail:0000259:91a8b99d-ad83-4d68-ba8b-313e6f21d3b8", "row_index": 259, "timestamp": "2018-04-16T10:37:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1920, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91a8b99d-ad83-4d68-ba8b-313e6f21d3b8", "eventTime": "2018-04-16T10:37:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 2OcPlvMyNGmWpPC2AFdwho2y_RiaeBDMBf1g3AGHjgHrWqT3YR1lBrcjsAPl-DIJK5WvZH2ahzTa528jzbamEdfeC7Wjo7gYTdfoV8N9tjITPXy9bsKAbVmlSot8zgU6E9715UVFxu9lGtLSaZfHyfh1vSwf2lRrSTNIRKXxn1AOoajRXtGyX49on13H_1Tn3K37CCmte9mHIlwm_-G5KHsIpQxoEBsvKfsvrGDtaHkghz_9d3ZvfWhzWvafQjXVsHkBSQbRMVMjuaNjlYHbqkKZe28M2dfyys8U5YNBIFreuauwPmgmDF2KFVkIaOBxzrVYaCPYSuGaoCZEO511tkKlcOEvW2rCQwONFK7HEtIzp-NhFkoqO2q-qHwg_qxTwh-pFCM3tWiQ1cZkPSmtqP1-1K4IPTD4TKB-J9E_-dbNnQkw6C2obYR0SlXv-Gw-cTuhG2Pj6V9DFSAegSU1xB131DkY0WpRd78a1fNWtr6VCKQIm2gDWC-HjYxO0tf8JZPgm6yHZlCyAXBm27cU7FRyu-l530jGG-PxgZFzTNPXjCJZm6A5uxG4phFcINfTPLxRD5qlH50Ovwd7AI3HsKSLcjKbu0KRSKMjrq_roNG3-25Fo4VF4WRw50WxoWJHXzEKsfOsC_nLEwp6N_skrLg39KgNtdJjF1Y", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "589251d14-6e73-4009-aa40-228fd50440bc", "record_id": "flaws_cloudtrail:0000260:589251d14-6e73-4009-aa40-228fd50440bc", "row_index": 260, "timestamp": "2018-04-16T10:37:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "589251d14-6e73-4009-aa40-228fd50440bc", "eventTime": "2018-04-16T10:37:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "598ba8c3-d6bc-409b-a838-ffc77427e00c", "record_id": "flaws_cloudtrail:0000261:598ba8c3-d6bc-409b-a838-ffc77427e00c", "row_index": 261, "timestamp": "2018-04-16T10:37:51Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 912, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "598ba8c3-d6bc-409b-a838-ffc77427e00c", "eventTime": "2018-04-16T10:37:51Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d58f3b4b-a0bd-4ef1-a55e-a2e8a337e922", "record_id": "flaws_cloudtrail:0000262:d58f3b4b-a0bd-4ef1-a55e-a2e8a337e922", "row_index": 262, "timestamp": "2018-04-16T10:37:51Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d58f3b4b-a0bd-4ef1-a55e-a2e8a337e922", "eventTime": "2018-04-16T10:37:51Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "293931b-e2a0-4ce7-b5ce-94645fd74bdc", "record_id": "flaws_cloudtrail:0000263:293931b-e2a0-4ce7-b5ce-94645fd74bdc", "row_index": 263, "timestamp": "2018-04-16T10:37:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "293931b-e2a0-4ce7-b5ce-94645fd74bdc", "eventTime": "2018-04-16T10:37:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d35e5053-fe0c-4079-8b5c-e34096f5adec", "record_id": "flaws_cloudtrail:0000264:d35e5053-fe0c-4079-8b5c-e34096f5adec", "row_index": 264, "timestamp": "2018-04-16T10:37:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d35e5053-fe0c-4079-8b5c-e34096f5adec", "eventTime": "2018-04-16T10:37:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e491909a9-31ad-4ba7-ac9d-c390a8e8ab1f", "record_id": "flaws_cloudtrail:0000265:e491909a9-31ad-4ba7-ac9d-c390a8e8ab1f", "row_index": 265, "timestamp": "2018-04-16T10:37:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e491909a9-31ad-4ba7-ac9d-c390a8e8ab1f", "eventTime": "2018-04-16T10:37:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e600c4f-c78f-4f3f-a075-e0d1be5d6435", "record_id": "flaws_cloudtrail:0000266:3e600c4f-c78f-4f3f-a075-e0d1be5d6435", "row_index": 266, "timestamp": "2018-04-16T10:37:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e600c4f-c78f-4f3f-a075-e0d1be5d6435", "eventTime": "2018-04-16T10:37:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27e68f6c-73b6-4ef2-9ebe-9446dbca147c", "record_id": "flaws_cloudtrail:0000267:27e68f6c-73b6-4ef2-9ebe-9446dbca147c", "row_index": 267, "timestamp": "2018-04-16T10:37:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27e68f6c-73b6-4ef2-9ebe-9446dbca147c", "eventTime": "2018-04-16T10:37:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42fbb87b-16bb-4d6c-bf3e-8cd1fa9bfd81", "record_id": "flaws_cloudtrail:0000268:42fbb87b-16bb-4d6c-bf3e-8cd1fa9bfd81", "row_index": 268, "timestamp": "2018-04-16T10:37:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42fbb87b-16bb-4d6c-bf3e-8cd1fa9bfd81", "eventTime": "2018-04-16T10:37:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dcb2956-9269-449e-85ab-fb11f1de4c8b", "record_id": "flaws_cloudtrail:0000269:8dcb2956-9269-449e-85ab-fb11f1de4c8b", "row_index": 269, "timestamp": "2018-04-16T10:37:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dcb2956-9269-449e-85ab-fb11f1de4c8b", "eventTime": "2018-04-16T10:37:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c602df1-e9c3-4b8c-89d1-2a3c6a663f09", "record_id": "flaws_cloudtrail:0000270:7c602df1-e9c3-4b8c-89d1-2a3c6a663f09", "row_index": 270, "timestamp": "2018-04-16T10:37:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c602df1-e9c3-4b8c-89d1-2a3c6a663f09", "eventTime": "2018-04-16T10:37:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37b85ea2-7b87-4a87-ab7e-c3cbcc1b5f5b", "record_id": "flaws_cloudtrail:0000271:37b85ea2-7b87-4a87-ab7e-c3cbcc1b5f5b", "row_index": 271, "timestamp": "2018-04-16T10:37:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37b85ea2-7b87-4a87-ab7e-c3cbcc1b5f5b", "eventTime": "2018-04-16T10:37:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f201d11-f82a-4fc7-b8e9-68b06d81cccd", "record_id": "flaws_cloudtrail:0000272:4f201d11-f82a-4fc7-b8e9-68b06d81cccd", "row_index": 272, "timestamp": "2018-04-16T10:37:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f201d11-f82a-4fc7-b8e9-68b06d81cccd", "eventTime": "2018-04-16T10:37:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: rdJvRKqb7sjsIRzkIxLxMD8VdJFjwGO4gnJT1O8q5XMX9liEicFxCXY48dLwJ2yTN8DLaN0FhVkTpm-sI46GkJDkp-oRwH_tp-aWQFV-kfdpA2KgwnJ0u_ehC33HIq6vEUN1rU1DvJ5Q-_y7RkJ3IsUHXdtITCwyJBsEfNM4NQjPpfDrT-OSxUP2WOlx-1LGC03_wf2jqPpbZhbRiOYzdai_PTJ155mFU6mCOoHoe3rs2z-pK9_zFYQjBGyCq_equY32_0411y2TThICQBbf_U7nHNwxUbsy-1hEBVIq-r1N1L5f-WIF0H3TAEGdiaN881dBS0dADwHNNhHhTo-6CatKZ5GzIJkw0d7EzR7g6Xt19UBKq6zA4Kb0oyf-xtMVezCZONhAaZcLfodz15A0HHc0-axH3VEMXIuB73qz2zQBignz7TmtVNL5sxeku7kWfwucDZ5zI_jC8oHByuEJcZ1lRmkh7PDNl3oqLWxxH4Ud1kxHdpyjS4jvg6jPDcOLTjgE8fKTzhd8erIwHpHpw7LBan2Q1P0OocsBy7qew388CPwptBXM9o8BxeBNvzMRw6tpHm8nl3BSZS_5eSoK7tlilzULUIe85NPYj8V__HUTphJI4rfVyq-sODaGEjqrU_ogw2Vrhphk8UkR9gTFieCTgP-0pTvjL-ZV608", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60224f89-79e0-4b57-8970-be5e8c169b30", "record_id": "flaws_cloudtrail:0000273:60224f89-79e0-4b57-8970-be5e8c169b30", "row_index": 273, "timestamp": "2018-04-16T10:37:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60224f89-79e0-4b57-8970-be5e8c169b30", "eventTime": "2018-04-16T10:37:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "283208ea6-d5f6-471f-8dc5-993158a1fc75", "record_id": "flaws_cloudtrail:0000274:283208ea6-d5f6-471f-8dc5-993158a1fc75", "row_index": 274, "timestamp": "2018-04-16T10:37:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "283208ea6-d5f6-471f-8dc5-993158a1fc75", "eventTime": "2018-04-16T10:37:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bd07f50-178d-410c-99c2-e76ddbdb74a6", "record_id": "flaws_cloudtrail:0000275:0bd07f50-178d-410c-99c2-e76ddbdb74a6", "row_index": 275, "timestamp": "2018-04-16T10:37:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bd07f50-178d-410c-99c2-e76ddbdb74a6", "eventTime": "2018-04-16T10:37:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9df6c2ff-03d7-4fae-9847-3f178257a6e7", "record_id": "flaws_cloudtrail:0000276:9df6c2ff-03d7-4fae-9847-3f178257a6e7", "row_index": 276, "timestamp": "2018-04-16T10:37:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1935, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9df6c2ff-03d7-4fae-9847-3f178257a6e7", "eventTime": "2018-04-16T10:37:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 6As51F4GjIP9mNBmdvPvQ4Nv7bPGMpVB9CESXdLCLymFPY5IsTe9UzO-9QmUdE7wqIFWxHwPqizyt4BekGQFFYQK2zwYEPcNijsHz9VTFvm7PXhp6HdCsp6BOCnB_4L8z7at7fh8WvWNIAmiKCGDrHtb0t3B5zqspJrN8iglCoaLV6wK029STq-IK7gtK1p_GisWNpEexmaupP9KGniHbNxjMr6rrRDHOBMgCILpDxHJ29A2X7aMpha3_QT02sYXGF-RYQVApv4ONO1DNCWhHPEvkw9jCYhCA6Oft1qpLpjjpgupzQy5swNk-iNof1qI9DnWX3m6seGSncss60_sdzfF-bqWOnhuilmIrxLBHBi6FZxtF57OICx01pcs0UN1ObF0YJ0A8-9dChf2_nuPjuLfncWqujcJABFoE1Ixz5vbaG5nzrZuLnV2DmOOmwlrpOHl9wIOGM9UTh5UkPkFaKixjl8zQKnvybFY6WYO5j-nqFXC-75iIQ5n6gWv-vQa5R4WQ-A1o3MLjSQdHWG7m3aagPWJfTQMg8AAQdyoaADWuwHQ1NjG-BdKo_KyZZ_9YslAz_qGszoZxqo4If9ZKnuyyFpf_1OLnna7GzsMrLnBFtbXxOJRJJRzZchWa7GdwhZvbccmiTkWKWwFKPi3gxcL5iLn9He_TUay4-M", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64737e-6528-4a5c-a0a9-353970bc303b", "record_id": "flaws_cloudtrail:0000277:64737e-6528-4a5c-a0a9-353970bc303b", "row_index": 277, "timestamp": "2018-04-16T10:37:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64737e-6528-4a5c-a0a9-353970bc303b", "eventTime": "2018-04-16T10:37:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b79e4f1-e061-46ef-a8b4-187f5df3160d", "record_id": "flaws_cloudtrail:0000278:6b79e4f1-e061-46ef-a8b4-187f5df3160d", "row_index": 278, "timestamp": "2018-04-16T10:37:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1375, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b79e4f1-e061-46ef-a8b4-187f5df3160d", "eventTime": "2018-04-16T10:37:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68e213a1-8186-4426-9773-351eba9c7770", "record_id": "flaws_cloudtrail:0000279:68e213a1-8186-4426-9773-351eba9c7770", "row_index": 279, "timestamp": "2018-04-16T10:37:57Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68e213a1-8186-4426-9773-351eba9c7770", "eventTime": "2018-04-16T10:37:57Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dd824165-8351-4d46-bf93-2f582870bd844", "record_id": "flaws_cloudtrail:0000280:4dd824165-8351-4d46-bf93-2f582870bd844", "row_index": 280, "timestamp": "2018-04-16T10:37:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dd824165-8351-4d46-bf93-2f582870bd844", "eventTime": "2018-04-16T10:37:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21c19df1-3d7a-450c-82bf-702b8665d90a", "record_id": "flaws_cloudtrail:0000281:21c19df1-3d7a-450c-82bf-702b8665d90a", "row_index": 281, "timestamp": "2018-04-16T10:37:58Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21c19df1-3d7a-450c-82bf-702b8665d90a", "eventTime": "2018-04-16T10:37:58Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad6ca79f-0b10-405f-809c-1e748584c4e1", "record_id": "flaws_cloudtrail:0000282:ad6ca79f-0b10-405f-809c-1e748584c4e1", "row_index": 282, "timestamp": "2018-04-16T10:37:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad6ca79f-0b10-405f-809c-1e748584c4e1", "eventTime": "2018-04-16T10:37:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ef6a312-d0bc-46a9-85b5-dc881441af1f4", "record_id": "flaws_cloudtrail:0000283:3ef6a312-d0bc-46a9-85b5-dc881441af1f4", "row_index": 283, "timestamp": "2018-04-16T10:37:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ef6a312-d0bc-46a9-85b5-dc881441af1f4", "eventTime": "2018-04-16T10:37:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0762eb4-ea8a-46da-a10f-43eb9800d1a4", "record_id": "flaws_cloudtrail:0000284:a0762eb4-ea8a-46da-a10f-43eb9800d1a4", "row_index": 284, "timestamp": "2018-04-16T10:38:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1271, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0762eb4-ea8a-46da-a10f-43eb9800d1a4", "eventTime": "2018-04-16T10:38:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8acad73a-67bc-4bed-90f2-a9413cc2aeda", "record_id": "flaws_cloudtrail:0000285:8acad73a-67bc-4bed-90f2-a9413cc2aeda", "row_index": 285, "timestamp": "2018-04-16T10:38:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8acad73a-67bc-4bed-90f2-a9413cc2aeda", "eventTime": "2018-04-16T10:38:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69c3f42f-4c4c-4ecc-91a5-7111c37a0a07", "record_id": "flaws_cloudtrail:0000286:69c3f42f-4c4c-4ecc-91a5-7111c37a0a07", "row_index": 286, "timestamp": "2018-04-16T10:38:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1380, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69c3f42f-4c4c-4ecc-91a5-7111c37a0a07", "eventTime": "2018-04-16T10:38:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce7a1d86-db7c-45eb-8f77-b49ce6aa8318", "record_id": "flaws_cloudtrail:0000287:ce7a1d86-db7c-45eb-8f77-b49ce6aa8318", "row_index": 287, "timestamp": "2018-04-16T10:38:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce7a1d86-db7c-45eb-8f77-b49ce6aa8318", "eventTime": "2018-04-16T10:38:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: bLuBtyJKEBeiMuR90f_sgFee0YhbZ99NA6hsDC-nER4Y_DUgHpaISAXV3Izn1QL3wFqR8FHpgfMudMpLB_gkUAVNx5MSKdahyVglJcgU1_YTjq7nlvQNTkCzzi4EXnS8xIiX7JG_JASrjFcVIprsQ7yfqXiniKB9_DfAzdxXyXNIMjlo0k8yWjmCPnv03mSxKYBdjnSe_ckR54ggc19MqOjSwOGYCaesFKc6geZ-ZGVtcfjc5qpnqJ5c_rDLLM90miz307efsAu5S8DwcCWMU5_wMK_DKoKh3il4sVTWM6VcF4EJOcp5NSxTp2X5MaOdW8MbvqRiaLcVpbDkhxqGTClvr1O6pERSFskyIo6qOTnHlwr1MYh9ZWFvMvJoCKnKFh2wrgIzUxsBrfbHXLmxOAMfkNrlnC0qkogQKGMBOQDw7bWLS3B-u4n3jJ-p5Fyygmh1VPCQxae8JRf0X414BNsjOhChis0DXCBSrDByaQa_wat3GcfGiA_TKn9tl00lp3yFAhp2Fvz8M4Gq1hSPrytZTCtnINUru5UBOOhTdl1vfxOWk78NqePZUnqk8CBhVCGLt_gQtXYlWJghECs2lpdbkqSxOasOdW6kQTzkavkSjGOBqLSkc6Q3OU45wwgMJBt9QT01AN-of4t7pXtgopWi7AFeZo9Y6w", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59072-8d58-444b-9a93-e7b44ebf24ec", "record_id": "flaws_cloudtrail:0000288:59072-8d58-444b-9a93-e7b44ebf24ec", "row_index": 288, "timestamp": "2018-04-16T10:38:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59072-8d58-444b-9a93-e7b44ebf24ec", "eventTime": "2018-04-16T10:38:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4195d7b-cd3e-4448-bfd7-e343865ab7827", "record_id": "flaws_cloudtrail:0000289:e4195d7b-cd3e-4448-bfd7-e343865ab7827", "row_index": 289, "timestamp": "2018-04-16T10:38:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1929, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4195d7b-cd3e-4448-bfd7-e343865ab7827", "eventTime": "2018-04-16T10:38:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GSpCqX9LgvXbTeSX4Clki7SBezgIH6IfQqjxCNPiJD1PBLPZtmeTrjaG3kLwUrEBcYzmgau28W5cEt9Dg3CMIYcjmLkUTsvDPbL0vhNsBGTirZOGbnYo0UQIk1f4aI2xWlHTDh5aXcztdkBqG56kjWzxFhyihqxntPGyhJ_RS2XSfQp12J_6SKYB8qlGgRcAscMaLYp0A2kMyR3dHu5MJ8leiB5l_BmZhzAPYTAfJXVd7igeskmK7Hj1TmV-c62gFlJylxTWgUo__MBSX32D8to0SHp7tDCrs4DI0Mgpa5I4whemGLd3Mev3rMfSD7OMd68KyNmr7bvLRt5AhI6bhTszRnWnSzpDCjEML3g0AT-t5W27MpynM-Rus7l-IgJ4L-iKyiW-8Lkkr8H54y_B-xGlWJRL0YaUs5oCEs2QosQ1pFuiaR_VxQRspHbFSYrLIF7R64ZbLclulRg4VtXbpEIkdjPYtODUuLIZjT3dNRdGoEhq7AxseMKGC-pnwfAATgJ3LNY4p1vvjINCeGalK7ftwJyIDyhpT_dhNjDUTkVmQhReaUVVthCN91RrUNfS_1IIlsMuOiogJl_Iq2lRkEcTJ9oYDGa2NxZznFptqlAIUSJSjQEuGIXanDGmiapBDSBH65Zg6PNTkMhKNKn42keeV5vyJmU659ZP", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24cc2f7b-ecc1-4211-b65a-27bf50a0552d", "record_id": "flaws_cloudtrail:0000290:24cc2f7b-ecc1-4211-b65a-27bf50a0552d", "row_index": 290, "timestamp": "2018-04-16T10:38:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1273, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24cc2f7b-ecc1-4211-b65a-27bf50a0552d", "eventTime": "2018-04-16T10:38:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "613184a38-6f94-4ac9-870b-c728ff6441df", "record_id": "flaws_cloudtrail:0000291:613184a38-6f94-4ac9-870b-c728ff6441df", "row_index": 291, "timestamp": "2018-04-16T10:38:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "613184a38-6f94-4ac9-870b-c728ff6441df", "eventTime": "2018-04-16T10:38:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6e21ed0-e14b-4c4b-b947-fda9bc75614", "record_id": "flaws_cloudtrail:0000292:a6e21ed0-e14b-4c4b-b947-fda9bc75614", "row_index": 292, "timestamp": "2018-04-16T10:38:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1930, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6e21ed0-e14b-4c4b-b947-fda9bc75614", "eventTime": "2018-04-16T10:38:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: aKbLfUxHnFIyhUrxgYiJMsvzf9hG2igE29RRqoevXXdMOoTWqTPS3Jp6ND988bCOgII8O_FiWMXN_l_ylIcf0vymMuwr1Y7MrbYaiCfGEzxQZW_w5F-I2-_4KGs0Dfxiaz4TmJz2g1WzMLjVY92SmmhjmnaOYjQrxwzgm-uyxKTvtTYDudP9xx6HBYP1YHow3DaL94o5eTAQI_pLJSgNIjT29sVpYdwG4ABDQh0hL0x325f1SiceoV3Uo93yYpp3sEsqBgfctUfTTItmSV1Jb4PMfy_vggixEEVOSUiXcvnC4pXEFTYMuAfDMOJQeqy6jcUnGPU_6VQ5oEAqrS96_2E25eH3Pmw58IjcU4-fUvmhrIq4snT0fB5m1d1GD2wYMZzbPnJKtwGoUy4EL7tXHcGNzEOvw3APr-a-KhElHMb8trhPpicHCztc8D4NKjEHoZuLwURP6RgEHt6ibUCPwIIQIDlBG9rF_w4_hWaGMz0UojDB82_bdyFue7UZJlLn3t-1GlyO_-vvTDy2E3G4LCAmwfosKEYRvYiNVUBxgc15Laomxax58cnmjnMYJcfzE0Af4Toun6Ho_H-6kOUodO_6ycEAm9ZxJ-g9k2vth9hC2OcofPO250IVRCpwjt9tw8UbT6KG-psFZRGBqOwYljNAZIa34Z8ZRd5a", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef32ad4c-67a0-4b66-891a-139cc915c07d", "record_id": "flaws_cloudtrail:0000293:ef32ad4c-67a0-4b66-891a-139cc915c07d", "row_index": 293, "timestamp": "2018-04-16T10:38:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef32ad4c-67a0-4b66-891a-139cc915c07d", "eventTime": "2018-04-16T10:38:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aee07c19-1fd8-4824-abd0-1f5f2da6bc20", "record_id": "flaws_cloudtrail:0000294:aee07c19-1fd8-4824-abd0-1f5f2da6bc20", "row_index": 294, "timestamp": "2018-04-16T10:38:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aee07c19-1fd8-4824-abd0-1f5f2da6bc20", "eventTime": "2018-04-16T10:38:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46442-7a08-4f2e-aaf9-d13d078dd715", "record_id": "flaws_cloudtrail:0000295:46442-7a08-4f2e-aaf9-d13d078dd715", "row_index": 295, "timestamp": "2018-04-16T10:38:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46442-7a08-4f2e-aaf9-d13d078dd715", "eventTime": "2018-04-16T10:38:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e039cbd-59a7-45f8-b9e1-d269258c45af8", "record_id": "flaws_cloudtrail:0000296:6e039cbd-59a7-45f8-b9e1-d269258c45af8", "row_index": 296, "timestamp": "2018-04-16T10:38:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e039cbd-59a7-45f8-b9e1-d269258c45af8", "eventTime": "2018-04-16T10:38:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47d66f2f-07f4-4e4a-a684-9cd8a02279", "record_id": "flaws_cloudtrail:0000297:47d66f2f-07f4-4e4a-a684-9cd8a02279", "row_index": 297, "timestamp": "2018-04-16T10:38:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47d66f2f-07f4-4e4a-a684-9cd8a02279", "eventTime": "2018-04-16T10:38:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc0d968a-cbbe-49c2-92c7-5b9a6407f98e", "record_id": "flaws_cloudtrail:0000298:fc0d968a-cbbe-49c2-92c7-5b9a6407f98e", "row_index": 298, "timestamp": "2018-04-16T10:38:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc0d968a-cbbe-49c2-92c7-5b9a6407f98e", "eventTime": "2018-04-16T10:38:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48bcc9e5-def6-44cb-8a06-d834562e34e8", "record_id": "flaws_cloudtrail:0000299:48bcc9e5-def6-44cb-8a06-d834562e34e8", "row_index": 299, "timestamp": "2018-04-16T10:38:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48bcc9e5-def6-44cb-8a06-d834562e34e8", "eventTime": "2018-04-16T10:38:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fc5f0f9-5b81-4ecb-9dc7-48dd9ac0a04e", "record_id": "flaws_cloudtrail:0000300:4fc5f0f9-5b81-4ecb-9dc7-48dd9ac0a04e", "row_index": 300, "timestamp": "2018-04-16T10:38:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fc5f0f9-5b81-4ecb-9dc7-48dd9ac0a04e", "eventTime": "2018-04-16T10:38:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e94642-5209-4b2f-ab2c-733b3a3b9072", "record_id": "flaws_cloudtrail:0000301:e94642-5209-4b2f-ab2c-733b3a3b9072", "row_index": 301, "timestamp": "2018-04-16T10:38:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1268, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e94642-5209-4b2f-ab2c-733b3a3b9072", "eventTime": "2018-04-16T10:38:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca955f70-0d37-4575-a908-627a4acae803", "record_id": "flaws_cloudtrail:0000302:ca955f70-0d37-4575-a908-627a4acae803", "row_index": 302, "timestamp": "2018-04-16T10:38:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca955f70-0d37-4575-a908-627a4acae803", "eventTime": "2018-04-16T10:38:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adb136808-574c-4947-9f2c-fd93ce2583b9", "record_id": "flaws_cloudtrail:0000303:adb136808-574c-4947-9f2c-fd93ce2583b9", "row_index": 303, "timestamp": "2018-04-16T10:38:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1928, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adb136808-574c-4947-9f2c-fd93ce2583b9", "eventTime": "2018-04-16T10:38:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: QzLpYxkGYoV7Hpr690eQPHe4jzSH8Pg2fknxI7EVL8cS3ZWUeyPA3BFiKzu0fXroMWe-pvPD7LWNW-iWP8g_fGSE278Za1sVzbXLqT8CiHOjf8wnasgv-c6U5OfxJ6pkjhlvNLvwJb11Hs4FfjYIgkibcPhLTomPGXtn4Eq2o-EllPVwp7C6wZToQDSsmDX77s1z7g97KG8_CcpnN_VnOIvBVBgNWVRpn-2MCQs9sFKSmgKWda68yY0t7KIWKYhDygue1GrvwqZ3hPxU9gbemhd7-2LhYC_jKR5S1j9QQVjX_GtZbUGnO2dTy6HoRnaCJNqV4RasSrnmhqxlMEQnplz8zc-UvSBnaTh6TByZ4JlhZL0ZewEqcmxBePzBj-4bzAU2SeKgs7CJIEl05e6pLLcKMQgqj_-7YKYyOqMlL5sbpXg_6vG3tPzoIK5v_s8etJ4riFYKcmnJLv3x3-iSfI0x1R8c31qVQApvFUhkBsBcwvyIL2ctwqHnfw2EdVshyYyTPLh3ny5LJ1205J01azAfZHgHR89lyKSprf819q3kC2gXpoC1d_3ZhvQbp3AVr8VHXMpeImK34ubfvpdEFbICcXTSbAqFx3oawk-hWufi9UOloAITs8VDllcAG9jTcKZD3gQQ35PrQE6Acv8vaviWb2cDXMnhuUU", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f23f527a-eca1-4583-b5ef-8181eab0d3a9", "record_id": "flaws_cloudtrail:0000304:f23f527a-eca1-4583-b5ef-8181eab0d3a9", "row_index": 304, "timestamp": "2018-04-16T10:38:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1928, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f23f527a-eca1-4583-b5ef-8181eab0d3a9", "eventTime": "2018-04-16T10:38:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ijNF7bi7adud85r_gXXdorBSdPd7FpO1oAwUFrC-Ht8SJZfRgQE4bOspm7O1Pv3QS3fr9VWkdrdk8xGvOvf3kaNCVeO0fhRjHO8ORJxGUisQp4PwXz293GB8qnN8jvS_KRtpEp0rJGzV96mkxmk9tjRrxt9oguo4Ksq_wMes0fFgLMz0q38vbUl3Au2DI61yr001gBmi_jvWO5pms4XYfbb1AC4ky24igCfDEGyO0jla4VHc8cWEf2gJ4k9L2aob3LD6qRu5LTPobMN0BkTOiDn02FBU0e4MC09nVruc6oinOdI_jwUfAiCtbfLy6gz1jW-im2pB2xcLXbAppIQMGke3UJlD70pCqWjU0S3P5ns4Je3pTbclrjM4aBXvZv3sbzjloO5LAe0h8pQtOzVQvzNK4snbeFr3yVXxlvkrTDrHi-QJS5AqeiBg-z3eEgfIn5MZpsvqa4MBHyrb67959-2KBRAXvbQqEZ_RuPYXok7Ym7jGT5eKGkQ3IBKFNNKuUzy550qgBAmn8O_nW177262d92yptj1O0c_GwCj4H6vS4JBbarLAfxr0n2DOC4fbPvRD7eiFHUrNilTMWONzkWkxkuYGmjjDPhSypaXOxLA41fnHtVpIqn5m8HThSaW0CaihN7C2qcswT9uVmJGeiK4sVIkFsAkrLNA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b43285-d1cb-4cd8-b013-efe57c334b31", "record_id": "flaws_cloudtrail:0000305:7b43285-d1cb-4cd8-b013-efe57c334b31", "row_index": 305, "timestamp": "2018-04-16T10:38:12Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b43285-d1cb-4cd8-b013-efe57c334b31", "eventTime": "2018-04-16T10:38:12Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4df75cd7-b23f-42ee-880b-e518d1f56f8a", "record_id": "flaws_cloudtrail:0000306:4df75cd7-b23f-42ee-880b-e518d1f56f8a", "row_index": 306, "timestamp": "2018-04-16T10:43:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGK60R0AZWEKJZR36", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "41.44.123.87", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 513, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4df75cd7-b23f-42ee-880b-e518d1f56f8a", "eventTime": "2018-04-16T10:43:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "41.44.123.87", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGK60R0AZWEKJZR36", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee897b7f-0371-4f27-81a6-5b8a2bc8763b", "record_id": "flaws_cloudtrail:0000307:ee897b7f-0371-4f27-81a6-5b8a2bc8763b", "row_index": 307, "timestamp": "2018-04-16T10:44:35Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGK60R0AZWEKJZR36", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "41.44.123.87", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 517, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee897b7f-0371-4f27-81a6-5b8a2bc8763b", "eventTime": "2018-04-16T10:44:35Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "41.44.123.87", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGK60R0AZWEKJZR36", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20af607-8d78-423e-839d-cb7e0b840bb9", "record_id": "flaws_cloudtrail:0000308:d20af607-8d78-423e-839d-cb7e0b840bb9", "row_index": 308, "timestamp": "2018-04-16T10:45:53Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGK60R0AZWEKJZR36", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "41.44.123.87", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-5269"], "raw_record_size_bytes": 642, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20af607-8d78-423e-839d-cb7e0b840bb9", "eventTime": "2018-04-16T10:45:53Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "41.44.123.87", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGK60R0AZWEKJZR36", "userName": "backup"}, "requestParameters": {"name": "trail-5269"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-5269"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "268e3e98-d5f0-4bc4-9fd0-5c6090060e97", "record_id": "flaws_cloudtrail:0000309:268e3e98-d5f0-4bc4-9fd0-5c6090060e97", "row_index": 309, "timestamp": "2018-04-16T10:46:58Z", "event_type": "StopLogging", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGK60R0AZWEKJZR36", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "41.44.123.87", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-5269"], "raw_record_size_bytes": 639, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "268e3e98-d5f0-4bc4-9fd0-5c6090060e97", "eventTime": "2018-04-16T10:46:58Z", "eventName": "StopLogging", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "41.44.123.87", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGK60R0AZWEKJZR36", "userName": "backup"}, "requestParameters": {"name": "trail-5269"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-5269"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2a8108a-3f37-4306-8af3-966862b20670", "record_id": "flaws_cloudtrail:0000310:e2a8108a-3f37-4306-8af3-966862b20670", "row_index": 310, "timestamp": "2018-04-16T10:47:38Z", "event_type": "UpdateTrail", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGK60R0AZWEKJZR36", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "41.44.123.87", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-5269"], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2a8108a-3f37-4306-8af3-966862b20670", "eventTime": "2018-04-16T10:47:38Z", "eventName": "UpdateTrail", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "41.44.123.87", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGK60R0AZWEKJZR36", "userName": "backup"}, "requestParameters": {"name": "trail-5269", "isMultiRegionTrail": false, "enableLogFileValidation": false}, "resources": [{"ARN": "arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-5269"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c945752b8-0f4f-4a9e-aaea-8efe12ddfef3", "record_id": "flaws_cloudtrail:0000311:c945752b8-0f4f-4a9e-aaea-8efe12ddfef3", "row_index": 311, "timestamp": "2018-04-16T11:11:35Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c945752b8-0f4f-4a9e-aaea-8efe12ddfef3", "eventTime": "2018-04-16T11:11:35Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9515b13b-ff2b-4ed6-9ba9-683738c80b", "record_id": "flaws_cloudtrail:0000312:9515b13b-ff2b-4ed6-9ba9-683738c80b", "row_index": 312, "timestamp": "2018-04-16T11:11:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9515b13b-ff2b-4ed6-9ba9-683738c80b", "eventTime": "2018-04-16T11:11:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03e0d35b-5388-4047-a0d0-8b08847b2bf7", "record_id": "flaws_cloudtrail:0000313:03e0d35b-5388-4047-a0d0-8b08847b2bf7", "row_index": 313, "timestamp": "2018-04-16T11:11:38Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03e0d35b-5388-4047-a0d0-8b08847b2bf7", "eventTime": "2018-04-16T11:11:38Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e56cb90-eef9-41f0-ad61-cf8fa49baf19", "record_id": "flaws_cloudtrail:0000314:3e56cb90-eef9-41f0-ad61-cf8fa49baf19", "row_index": 314, "timestamp": "2018-04-16T11:11:38Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e56cb90-eef9-41f0-ad61-cf8fa49baf19", "eventTime": "2018-04-16T11:11:38Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4671b8e8-d85d-4ae0-979d-82fd4a6fa976", "record_id": "flaws_cloudtrail:0000315:4671b8e8-d85d-4ae0-979d-82fd4a6fa976", "row_index": 315, "timestamp": "2018-04-16T11:11:38Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4671b8e8-d85d-4ae0-979d-82fd4a6fa976", "eventTime": "2018-04-16T11:11:38Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54efe3ca-480c-4d60-8144-2fa5d851773b", "record_id": "flaws_cloudtrail:0000316:54efe3ca-480c-4d60-8144-2fa5d851773b", "row_index": 316, "timestamp": "2018-04-16T11:11:41Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54efe3ca-480c-4d60-8144-2fa5d851773b", "eventTime": "2018-04-16T11:11:41Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33a092c1-6245-46ac-b97e-536372c6b46f", "record_id": "flaws_cloudtrail:0000317:33a092c1-6245-46ac-b97e-536372c6b46f", "row_index": 317, "timestamp": "2018-04-16T11:11:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33a092c1-6245-46ac-b97e-536372c6b46f", "eventTime": "2018-04-16T11:11:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8462aee0-543e-423c-8a11-4ec2d23b7807", "record_id": "flaws_cloudtrail:0000318:8462aee0-543e-423c-8a11-4ec2d23b7807", "row_index": 318, "timestamp": "2018-04-16T11:11:42Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8462aee0-543e-423c-8a11-4ec2d23b7807", "eventTime": "2018-04-16T11:11:42Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aefbcc25-8d47-490b-b27a-50260fcbc571", "record_id": "flaws_cloudtrail:0000319:aefbcc25-8d47-490b-b27a-50260fcbc571", "row_index": 319, "timestamp": "2018-04-16T11:11:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aefbcc25-8d47-490b-b27a-50260fcbc571", "eventTime": "2018-04-16T11:11:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4543fb15-3355-4b21-9ba6-149352cab1a", "record_id": "flaws_cloudtrail:0000320:4543fb15-3355-4b21-9ba6-149352cab1a", "row_index": 320, "timestamp": "2018-04-16T11:11:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4543fb15-3355-4b21-9ba6-149352cab1a", "eventTime": "2018-04-16T11:11:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f313d5af-b7e2-4959-9efa-387964bccafa", "record_id": "flaws_cloudtrail:0000321:f313d5af-b7e2-4959-9efa-387964bccafa", "row_index": 321, "timestamp": "2018-04-16T11:11:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f313d5af-b7e2-4959-9efa-387964bccafa", "eventTime": "2018-04-16T11:11:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c806cba-a2e9-4395-9469-81b79d088e06", "record_id": "flaws_cloudtrail:0000322:5c806cba-a2e9-4395-9469-81b79d088e06", "row_index": 322, "timestamp": "2018-04-16T11:11:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c806cba-a2e9-4395-9469-81b79d088e06", "eventTime": "2018-04-16T11:11:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3eff8da5-34c0-483f-aa18-883dd02dfd7e", "record_id": "flaws_cloudtrail:0000323:3eff8da5-34c0-483f-aa18-883dd02dfd7e", "row_index": 323, "timestamp": "2018-04-16T11:11:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1268, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3eff8da5-34c0-483f-aa18-883dd02dfd7e", "eventTime": "2018-04-16T11:11:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35c465c3-522c-4b55-82b0-4dd1bd8d2aa9", "record_id": "flaws_cloudtrail:0000324:35c465c3-522c-4b55-82b0-4dd1bd8d2aa9", "row_index": 324, "timestamp": "2018-04-16T11:11:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35c465c3-522c-4b55-82b0-4dd1bd8d2aa9", "eventTime": "2018-04-16T11:11:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13461e3-eac7-498a-a7e7-e4ffd462005", "record_id": "flaws_cloudtrail:0000325:13461e3-eac7-498a-a7e7-e4ffd462005", "row_index": 325, "timestamp": "2018-04-16T11:11:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1374, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13461e3-eac7-498a-a7e7-e4ffd462005", "eventTime": "2018-04-16T11:11:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb081893-bfd9-427d-92bd-fd2deea36b96", "record_id": "flaws_cloudtrail:0000326:fb081893-bfd9-427d-92bd-fd2deea36b96", "row_index": 326, "timestamp": "2018-04-16T11:11:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1269, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb081893-bfd9-427d-92bd-fd2deea36b96", "eventTime": "2018-04-16T11:11:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a87040a-eb8c-4811-afbd-b7d9471b77c3", "record_id": "flaws_cloudtrail:0000327:3a87040a-eb8c-4811-afbd-b7d9471b77c3", "row_index": 327, "timestamp": "2018-04-16T11:11:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a87040a-eb8c-4811-afbd-b7d9471b77c3", "eventTime": "2018-04-16T11:11:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "524479-cad2-42d2-b948-67065b3a319", "record_id": "flaws_cloudtrail:0000328:524479-cad2-42d2-b948-67065b3a319", "row_index": 328, "timestamp": "2018-04-16T11:11:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1924, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "524479-cad2-42d2-b948-67065b3a319", "eventTime": "2018-04-16T11:11:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: aGdydMAColwQnY5am4VBEJ2Dd6-LZlBULEAUvbBg5ac7mvGI4gmn7FyEL6MZWy4Dnx3FoTVKkADWggZLKNmVH8M-M31ZzCF7IqABbBwHv7epSkM7bU43Dd5lRipEx0x-CW4qScsphfpvmh90LLkk9xkawA9d1877wO2glrElQRkFo-gm-yy4i8Y-B1GuZkv6FQIYTurksT4N6aPuRR238quFQVx3HD5P5_9B0OnYzP99O493n2VaDkVsCVCVpXwh4CTSsGTGxc01RetyXrhgKaPAzN9kgSFE-0Ag0lmPG8B7UKqGxKjHH78EnEUdTCOMuiyFhpoXp260DrUlQvP4pM6rU_zlkAB7QnFelZ3yVFzxQX4na8lMWtxHKNd8EfN51rDP3y7oh4-AJbN2JJ7Ubz9AEOTs5CTwy7Oi6nBxquL6i1oqX5gRtr6fyC4ImS7G5MJGoHlXnDX-VtfOWSqKp7zksCg_6hGI__rQ3J7XOytbe_ZBQ6v9y0j88fVn3jeSjOhEqRATSlCRvSB-GPskeTgEi95K-ivrtWcDSg1kzFavx4iSryk7GVyJFEREkbKKGKW77DcF40po0xo8_pJOAuYyZ7oj8bPvhcVNfnKfdkuSxxhjZ-5lDMDjgD36kLJ19yhGC4Jumi-QtKUts1c1dtpkuNYqikfaQGw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a997e85-2426-4ed6-951d-92ed8549e4b9", "record_id": "flaws_cloudtrail:0000329:0a997e85-2426-4ed6-951d-92ed8549e4b9", "row_index": 329, "timestamp": "2018-04-16T11:11:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a997e85-2426-4ed6-951d-92ed8549e4b9", "eventTime": "2018-04-16T11:11:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "910df220-1bae-464c-a1c3-2b1ec484a66c", "record_id": "flaws_cloudtrail:0000330:910df220-1bae-464c-a1c3-2b1ec484a66c", "row_index": 330, "timestamp": "2018-04-16T11:11:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "910df220-1bae-464c-a1c3-2b1ec484a66c", "eventTime": "2018-04-16T11:11:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df89728-4855-42f1-b6ea-d982fca25374", "record_id": "flaws_cloudtrail:0000331:df89728-4855-42f1-b6ea-d982fca25374", "row_index": 331, "timestamp": "2018-04-16T11:11:49Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 912, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df89728-4855-42f1-b6ea-d982fca25374", "eventTime": "2018-04-16T11:11:49Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "052b90ef-518c-4af3-a79f-f64f439cd9a2", "record_id": "flaws_cloudtrail:0000332:052b90ef-518c-4af3-a79f-f64f439cd9a2", "row_index": 332, "timestamp": "2018-04-16T11:11:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "052b90ef-518c-4af3-a79f-f64f439cd9a2", "eventTime": "2018-04-16T11:11:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d097330-3727-4268-b5e3-96a966062a", "record_id": "flaws_cloudtrail:0000333:2d097330-3727-4268-b5e3-96a966062a", "row_index": 333, "timestamp": "2018-04-16T11:11:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d097330-3727-4268-b5e3-96a966062a", "eventTime": "2018-04-16T11:11:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "364e1d14-6399-4515-b246-61ecd499571fd", "record_id": "flaws_cloudtrail:0000334:364e1d14-6399-4515-b246-61ecd499571fd", "row_index": 334, "timestamp": "2018-04-16T11:11:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "364e1d14-6399-4515-b246-61ecd499571fd", "eventTime": "2018-04-16T11:11:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e06958f5-8590-4158-b04c-92271089c218", "record_id": "flaws_cloudtrail:0000335:e06958f5-8590-4158-b04c-92271089c218", "row_index": 335, "timestamp": "2018-04-16T11:11:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e06958f5-8590-4158-b04c-92271089c218", "eventTime": "2018-04-16T11:11:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "caa89307-e6f4-4a29-90fc-2b597b68cdb8", "record_id": "flaws_cloudtrail:0000336:caa89307-e6f4-4a29-90fc-2b597b68cdb8", "row_index": 336, "timestamp": "2018-04-16T11:11:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1380, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "caa89307-e6f4-4a29-90fc-2b597b68cdb8", "eventTime": "2018-04-16T11:11:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b858621d-3f22-40e2-abba-2bc578f61b2e", "record_id": "flaws_cloudtrail:0000337:b858621d-3f22-40e2-abba-2bc578f61b2e", "row_index": 337, "timestamp": "2018-04-16T11:11:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1380, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b858621d-3f22-40e2-abba-2bc578f61b2e", "eventTime": "2018-04-16T11:11:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57ed34c4-ac4b-4305-a1ad-8a55c408a067", "record_id": "flaws_cloudtrail:0000338:57ed34c4-ac4b-4305-a1ad-8a55c408a067", "row_index": 338, "timestamp": "2018-04-16T11:11:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57ed34c4-ac4b-4305-a1ad-8a55c408a067", "eventTime": "2018-04-16T11:11:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa60ab3e-47c7-4f96-93cc-e4186c2a244d", "record_id": "flaws_cloudtrail:0000339:aa60ab3e-47c7-4f96-93cc-e4186c2a244d", "row_index": 339, "timestamp": "2018-04-16T11:11:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa60ab3e-47c7-4f96-93cc-e4186c2a244d", "eventTime": "2018-04-16T11:11:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9497cc69-2c0d-436c-a42d-b2020782faa0", "record_id": "flaws_cloudtrail:0000340:9497cc69-2c0d-436c-a42d-b2020782faa0", "row_index": 340, "timestamp": "2018-04-16T11:11:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9497cc69-2c0d-436c-a42d-b2020782faa0", "eventTime": "2018-04-16T11:11:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76e04beb-5c8e-422a-b168-fcae0a39bfcd", "record_id": "flaws_cloudtrail:0000341:76e04beb-5c8e-422a-b168-fcae0a39bfcd", "row_index": 341, "timestamp": "2018-04-16T11:11:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76e04beb-5c8e-422a-b168-fcae0a39bfcd", "eventTime": "2018-04-16T11:11:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad794d97-5c0d-430c-b0e6-796ae5c187707", "record_id": "flaws_cloudtrail:0000342:ad794d97-5c0d-430c-b0e6-796ae5c187707", "row_index": 342, "timestamp": "2018-04-16T11:11:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad794d97-5c0d-430c-b0e6-796ae5c187707", "eventTime": "2018-04-16T11:11:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: JYXtsQV4ICBnbuuNoQX3zypuOtCpYsHoMu9IVSg2xNmLUWKhZwwqiONued028XDcC_U4BFpXlxflphcGoUxKbGQKUwDSAVK4pougqq29XkaxbecHjwcrOSAaU34mZKlLVtAa_IiOFNF-EHTZj2vsoQIlXEE4KQoxwbV43JSu8XjOdqXkghfN_TLRIXT_ZGURxDU53O98TduZNDhchts1a2YetDsvkouWd9S_JEpky3g8kS0feYtn72_6Q7AfeaCKcZT68O4KSviZTNOM1iorpHXsulcePLNswSI7PPTqBacGLPCbrjCeKHcfIwIoKfQRKuLYHpCvH7ceU6VE6iJQ0x8xt89w_anMN6xJERgW_DN4TSv0jztOLHvAYEm3kACUpIWwIjdchDmZofzq8_085gIbPJwCflaGkx4RB2_GdWZdwb14K_Cr_whTAZC98EY62UiBvxCllTfaP7VXfauVqt4GCPcpTH-hGaISXugSRpGJ_LhSOXpSQga7zwM_fG930wlwmDZDh5B7L4jOIb8d3uwS2nvTmFm97EtRVogg3HjU1dnpGIiuMEUkBkr2C60jt2Lp0x7vEmjjXogUPWy7E3FWwPdnayfnsXDouHaK4VgSZowiPNkXFfzsLanAFZVcp9Vr83EIDo90pG2P7RwA5LaMWyN-D5ioR1CXCvOX", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47de54a8-a7f2-457a-bbd0-7aa2e4db19dc", "record_id": "flaws_cloudtrail:0000343:47de54a8-a7f2-457a-bbd0-7aa2e4db19dc", "row_index": 343, "timestamp": "2018-04-16T11:11:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47de54a8-a7f2-457a-bbd0-7aa2e4db19dc", "eventTime": "2018-04-16T11:11:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fb17b49-df58-40d0-8851-ef19a7e37b18", "record_id": "flaws_cloudtrail:0000344:8fb17b49-df58-40d0-8851-ef19a7e37b18", "row_index": 344, "timestamp": "2018-04-16T11:11:59Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fb17b49-df58-40d0-8851-ef19a7e37b18", "eventTime": "2018-04-16T11:11:59Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aa6653e-b43c-452b-ba34-3dbb99389", "record_id": "flaws_cloudtrail:0000345:5aa6653e-b43c-452b-ba34-3dbb99389", "row_index": 345, "timestamp": "2018-04-16T11:11:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1371, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aa6653e-b43c-452b-ba34-3dbb99389", "eventTime": "2018-04-16T11:11:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e6de48f-cb4d-44aa-8ef3-971822a6e", "record_id": "flaws_cloudtrail:0000346:4e6de48f-cb4d-44aa-8ef3-971822a6e", "row_index": 346, "timestamp": "2018-04-16T11:12:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e6de48f-cb4d-44aa-8ef3-971822a6e", "eventTime": "2018-04-16T11:12:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba3be65f-8354-44f4-b06d-24e636b38210", "record_id": "flaws_cloudtrail:0000347:ba3be65f-8354-44f4-b06d-24e636b38210", "row_index": 347, "timestamp": "2018-04-16T11:12:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba3be65f-8354-44f4-b06d-24e636b38210", "eventTime": "2018-04-16T11:12:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b52a5fd-89c3-48b4-b04f-1ef1ae9887e6", "record_id": "flaws_cloudtrail:0000348:6b52a5fd-89c3-48b4-b04f-1ef1ae9887e6", "row_index": 348, "timestamp": "2018-04-16T11:12:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b52a5fd-89c3-48b4-b04f-1ef1ae9887e6", "eventTime": "2018-04-16T11:12:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bd92484-6aae-4bfe-9075-03ec26a568cf", "record_id": "flaws_cloudtrail:0000349:2bd92484-6aae-4bfe-9075-03ec26a568cf", "row_index": 349, "timestamp": "2018-04-16T11:12:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bd92484-6aae-4bfe-9075-03ec26a568cf", "eventTime": "2018-04-16T11:12:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b25f124-7df6-45ec-8156-4ecf56b59dfb", "record_id": "flaws_cloudtrail:0000350:9b25f124-7df6-45ec-8156-4ecf56b59dfb", "row_index": 350, "timestamp": "2018-04-16T11:12:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b25f124-7df6-45ec-8156-4ecf56b59dfb", "eventTime": "2018-04-16T11:12:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc5acdbf-4572-4a2e-b949-1573b5b4a09e", "record_id": "flaws_cloudtrail:0000351:dc5acdbf-4572-4a2e-b949-1573b5b4a09e", "row_index": 351, "timestamp": "2018-04-16T11:12:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc5acdbf-4572-4a2e-b949-1573b5b4a09e", "eventTime": "2018-04-16T11:12:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a69b2f06-0fbc-4699-8685-8450cba12f8c", "record_id": "flaws_cloudtrail:0000352:a69b2f06-0fbc-4699-8685-8450cba12f8c", "row_index": 352, "timestamp": "2018-04-16T11:12:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1372, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a69b2f06-0fbc-4699-8685-8450cba12f8c", "eventTime": "2018-04-16T11:12:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbf7402a-e0c4-454d-ac88-c510d07176c9", "record_id": "flaws_cloudtrail:0000353:dbf7402a-e0c4-454d-ac88-c510d07176c9", "row_index": 353, "timestamp": "2018-04-16T11:12:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbf7402a-e0c4-454d-ac88-c510d07176c9", "eventTime": "2018-04-16T11:12:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98ee0a48-4015-4145-b42e-10468c28a670", "record_id": "flaws_cloudtrail:0000354:98ee0a48-4015-4145-b42e-10468c28a670", "row_index": 354, "timestamp": "2018-04-16T11:12:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98ee0a48-4015-4145-b42e-10468c28a670", "eventTime": "2018-04-16T11:12:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af0aa574-a917-42da-97d6-c12f1bd42552", "record_id": "flaws_cloudtrail:0000355:af0aa574-a917-42da-97d6-c12f1bd42552", "row_index": 355, "timestamp": "2018-04-16T11:12:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af0aa574-a917-42da-97d6-c12f1bd42552", "eventTime": "2018-04-16T11:12:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: phbXka4LCIF9d-oLbydfkA55faJ7ZJrZsOFy0fOSwa_TKsf78TtFBPPC28cc3OeFQOtMY4oiIj9PtDSTbjaAc9SNVp4na9cebb1TtR8sjV4ny1n6EadycW2VFj8UWYtbbrYzJSDEuDlHqLLEnyDin9rEwerVEisF5FiduILcUMv3q6XBwBarG4QJdzWY2O1lVQeoyl2Ev7E2ndA7pAdi0HyBRgnw7Ee5lOdBVf98kqMNW1ZndzbrkSIzfwrZRvHJb181fniM4MuPQonF-TfkgCp2SGNc8hyq5PDAf5BoLg4AeflAU1yIBV2K9q3EpwpVQu2qJuESzyq9lI3Lv8OWkX6MPHOBRpmCy4Tq1e_wTCqZGgrFSDsvAc01kne8pkfha0G0h3ACNGfKhp0Z9ALeSB4CpRfZ97bUiVoBoTE3byB3rkH0TvCupOANCuZg8b-zN1FN-tz8T7xprvdBAsAwGtpnwppfZjY3PmDB3TtH_wxLhcW1tdXoyl9nm2llfeYfO0-dqZ54gxuS86z76vlAG4fGHS9qRYsl-k-sdpzp8NbfPu78WPz2lpcJ5bDBdAVUbSzwiMdVVi9wpK7do5--BP7FZEaTikpzIwfQHLnDZk0njp2uftTFqj4MrWRWJbfXsE0l_Y0Ao0RvfqUx58uF0oEJpjVQZlBzrn9Z2bg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4c55413-badd-4dce-87ff-cd4d86f031e3", "record_id": "flaws_cloudtrail:0000356:d4c55413-badd-4dce-87ff-cd4d86f031e3", "row_index": 356, "timestamp": "2018-04-16T11:12:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4c55413-badd-4dce-87ff-cd4d86f031e3", "eventTime": "2018-04-16T11:12:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7057d878-706d-4b04-8da9-4ca7f7c2a81f", "record_id": "flaws_cloudtrail:0000357:7057d878-706d-4b04-8da9-4ca7f7c2a81f", "row_index": 357, "timestamp": "2018-04-16T11:12:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7057d878-706d-4b04-8da9-4ca7f7c2a81f", "eventTime": "2018-04-16T11:12:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3a0d0bf-2522-43c0-b3cc-4bdb0f9d4b32", "record_id": "flaws_cloudtrail:0000358:b3a0d0bf-2522-43c0-b3cc-4bdb0f9d4b32", "row_index": 358, "timestamp": "2018-04-16T11:12:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3a0d0bf-2522-43c0-b3cc-4bdb0f9d4b32", "eventTime": "2018-04-16T11:12:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "816b1c39-243f-48d4-a7a2-698e96a403d9", "record_id": "flaws_cloudtrail:0000359:816b1c39-243f-48d4-a7a2-698e96a403d9", "row_index": 359, "timestamp": "2018-04-16T11:12:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1378, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "816b1c39-243f-48d4-a7a2-698e96a403d9", "eventTime": "2018-04-16T11:12:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92724fe6-8a80-46f8-b9c8-96f82eb507e6", "record_id": "flaws_cloudtrail:0000360:92724fe6-8a80-46f8-b9c8-96f82eb507e6", "row_index": 360, "timestamp": "2018-04-16T11:12:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1379, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92724fe6-8a80-46f8-b9c8-96f82eb507e6", "eventTime": "2018-04-16T11:12:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f189360b9-b418-4e5c-a9eb-636382f39d42", "record_id": "flaws_cloudtrail:0000361:f189360b9-b418-4e5c-a9eb-636382f39d42", "row_index": 361, "timestamp": "2018-04-16T11:12:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1927, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f189360b9-b418-4e5c-a9eb-636382f39d42", "eventTime": "2018-04-16T11:12:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: b1T59YO7uzLlRXrCVnV_ggw1FKP3IEv3VMcy3QVv5K9-bJ4-JGPpwlHQHRJeWyyWq9-QnXAYRz9oOi0aiYCKDYI8QU2PkEP7YVBLFeWK773l6XvAVTlhSgR7uWvuweQ3QkrWINfy-rZB4yN5dJ7qK4xorCmoVW_yeuaWTiOuwRYeYLpMYYF_27nu2Jn7hTmD0B6KKCQNqnLEFGva876cHLQFWplxOzHuzs_FJd6WGcaVO9UD84O-zyUmdJG9tDndqkMynry4P0q0bHol7oYI71VRjuYrYjOvQY4Wdj4dhZRYbODD2eWn2bdZokYDzX9ZRBXF_nD9JCyrEQ_I-db_MiVA6oMpxM296EbNosToNIy7WK5iD79Ya-iDBe4Ak0vFzeRN6MfofnByjiYSo09tuW60LF1uyKKUAmoT6FGExg-3FNBm76t1if9iSlVhjoewsAKmmkL-8bh0N2SgAxYJNzqbBx1-84Gtd797SYorxxsrnPeQFtCuenEICaSBiHZ5et9qY9DeO5Fj9XaRmU_HTkqZMkTSOaVSdqcuwjkJqG_tNyixC5amSBOP0U8Pv0TU9EuxK70XG-byexggPTPEp08a2kt7JkKn9LQEokdUnYbNR5qXVtjRyFJN-ThjSRgLLz6B17sl9oTi0zAnpRAWf8tgZ38P1b1nvw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f956b81b-a879-4a6a-8b51-795090dc", "record_id": "flaws_cloudtrail:0000362:f956b81b-a879-4a6a-8b51-795090dc", "row_index": 362, "timestamp": "2018-04-16T11:12:08Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f956b81b-a879-4a6a-8b51-795090dc", "eventTime": "2018-04-16T11:12:08Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e303ab9-cf42-4cdc-adf8-f3bda3b050309", "record_id": "flaws_cloudtrail:0000363:1e303ab9-cf42-4cdc-adf8-f3bda3b050309", "row_index": 363, "timestamp": "2018-04-16T11:12:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1274, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e303ab9-cf42-4cdc-adf8-f3bda3b050309", "eventTime": "2018-04-16T11:12:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "100c2b06-8bb3-41aa-8da5-8f227fdc0ad4", "record_id": "flaws_cloudtrail:0000364:100c2b06-8bb3-41aa-8da5-8f227fdc0ad4", "row_index": 364, "timestamp": "2018-04-16T11:12:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "100c2b06-8bb3-41aa-8da5-8f227fdc0ad4", "eventTime": "2018-04-16T11:12:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06958-eeb4-495c-84c3-3bbc419d0237", "record_id": "flaws_cloudtrail:0000365:06958-eeb4-495c-84c3-3bbc419d0237", "row_index": 365, "timestamp": "2018-04-16T11:12:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1374, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06958-eeb4-495c-84c3-3bbc419d0237", "eventTime": "2018-04-16T11:12:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09a132869-9bae-4ac9-8b50-3675eb78f492", "record_id": "flaws_cloudtrail:0000366:09a132869-9bae-4ac9-8b50-3675eb78f492", "row_index": 366, "timestamp": "2018-04-16T11:12:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1934, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09a132869-9bae-4ac9-8b50-3675eb78f492", "eventTime": "2018-04-16T11:12:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 64zB0gmPxQl8WtBDgPuey2_MqrQ8qx7zE22-3CX7FOdtTF6fhYLjcbIzFEMVBPwSuvIUHkOnNHjjoATtPuNE3BVopSPPHYgKY0WoXTtof5rW-wf878X2j7cI02wOZLEki_lzVhcN2ja5tUNgJgbB8-Lf-a5zjr7LyxkFdT2gnTNC0M9UzQKW5mikYC6HPAgaLY_wXhS8xNQujkyGWwMkT8Z3ot3mWBlCi6eakTxgkvVJl3clOEMJuk8X_A01UbxekqC2kkaCaE13tyfILVxbkSQ8MukpMUI3hM3ZMqOXTf3HtGv5soTAcMFeimx9cN0XUBSRkkgovkf1neunM9g4knOuvHDhgbsFzgsGUwdLb4-NsfzP4FqWPEDSINSBdGvG-6dcInHDQbhSw1yFMVjAns3KGrq4DJO2aZzPayrCSX8HpuK-zZC5xi2wkhuVZuVc7Quln2G_aK99JP7J-IFLnX94NAtmy7ujQOYdR9G9ORj6hsOTJ2MJ6q6XF04xdVz29ZnQr0SPVmXPkUXmICaHPnL3SMDpbEcTMpeC5Zuy8K1_zBlGRG9SyvCdQLyT-8OZ3n_oxlSoNTTcCxW1pLsqY61wmvgUfxGwS0B2gv1hs2wYxciE-MAkr3yFtDyBgefptAZkYiaWO7vZMXegJEcHOSWSQh7XXJwoQ-ILxw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd706ce5-c8ab-458e-8b73-dfae55184ff2", "record_id": "flaws_cloudtrail:0000367:bd706ce5-c8ab-458e-8b73-dfae55184ff2", "row_index": 367, "timestamp": "2018-04-16T11:12:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd706ce5-c8ab-458e-8b73-dfae55184ff2", "eventTime": "2018-04-16T11:12:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Zi-gK1caNMw5F3EtKLBAy0AwakdwBUcqr4b2H7S4e8xZ57TSmcbUiIVsS7xxZxJA3bdBWNC8aa68Fv4dtEi_5s1sDhjHrOwANWLoXtWcZtuAwx5ZgRIhvvkG35TMMpGyj9okbJWJkDeeW-dmjYno46sVLUIAOE-KUxiUcwRx_WN_s3Kl4ObeFqi0YX3YbaLpr1ViK2K-OD26ST0RseVYX0pJ5wLLu9z2flgPnBNFaqryDg16o_IuC-_EPpFP8KQVRcUyKMhlhslly8CF-nhYekVWLKXjq0TletjmDn-nXS_Mj-mxMpdVsqxS1aepJeNeYsA4Y0uPXU8N8sARsn-WjjYdLCfSVyW2mRaQ4da3RwGjhxVRHj_JWqu-8hFG8FpT-jEslNSa54dj5wk0RnVSu-AhjEU0jJCMYH1qJFgjkjBMRwrFf8ZHa-ZrbBdBMjfLH_OjFJmTdkbsuzmLtCTYwN6ihtQ18bKIVlpsGKDTFKkLI5Wihv-42vQwLABRwoYmacHRRPynWYV5OlKxMlRibLbCosTPVktUaNiyG8HnszjFl8YQ5L2HullQcCR_sHykFki67LldRbhrwetvqO8BkqipvmsGTXPvBmll2pzRfQl76dhKCTEn_O1X2bgbkdC-3NP48AoYbaHwrEb4aNkfsvm1Ui7bOWflgQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa583c9d-7fd3-4163-b690-f4f0877e093a", "record_id": "flaws_cloudtrail:0000368:aa583c9d-7fd3-4163-b690-f4f0877e093a", "row_index": 368, "timestamp": "2018-04-16T11:12:11Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa583c9d-7fd3-4163-b690-f4f0877e093a", "eventTime": "2018-04-16T11:12:11Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27c3ebcb-b120-4061-a366-015eec0fd7ee", "record_id": "flaws_cloudtrail:0000369:27c3ebcb-b120-4061-a366-015eec0fd7ee", "row_index": 369, "timestamp": "2018-04-16T11:12:11Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27c3ebcb-b120-4061-a366-015eec0fd7ee", "eventTime": "2018-04-16T11:12:11Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05b781a5-7723-4c4f-bbb4-216296cdb81", "record_id": "flaws_cloudtrail:0000370:05b781a5-7723-4c4f-bbb4-216296cdb81", "row_index": 370, "timestamp": "2018-04-16T11:12:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1274, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05b781a5-7723-4c4f-bbb4-216296cdb81", "eventTime": "2018-04-16T11:12:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "859b6c49-17a9-4923-99f5-0a121245dd89", "record_id": "flaws_cloudtrail:0000371:859b6c49-17a9-4923-99f5-0a121245dd89", "row_index": 371, "timestamp": "2018-04-16T11:12:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "859b6c49-17a9-4923-99f5-0a121245dd89", "eventTime": "2018-04-16T11:12:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1c30329-2f41-430f-9ba3-b97ddb36369f", "record_id": "flaws_cloudtrail:0000372:f1c30329-2f41-430f-9ba3-b97ddb36369f", "row_index": 372, "timestamp": "2018-04-16T11:12:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1c30329-2f41-430f-9ba3-b97ddb36369f", "eventTime": "2018-04-16T11:12:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "042106e-d6b7-4584-ad1f-a1d47ac91f6e", "record_id": "flaws_cloudtrail:0000373:042106e-d6b7-4584-ad1f-a1d47ac91f6e", "row_index": 373, "timestamp": "2018-04-16T11:12:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1935, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "042106e-d6b7-4584-ad1f-a1d47ac91f6e", "eventTime": "2018-04-16T11:12:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 37SRKWZCvqex2Ipir1-jFrqjQA3OQfwqNh4Xn4JRgZwQJJ70jvrGbRb3nhn0o2vshNXNEvdkkM9vVC1g_0uh75tTk_jxSEOnBuO_rK5V0dOzJ7q2kzlZD37njn_PjrBoyMNjH70FIy1g-SgIVUC2Cp-lQvhYvbDvRW-AB0V_OqS6YwwAknXrubgeOtN9CAnwhRTvUhZbascV6PH7iI0ISF9qFNtZ938NrLXfALwWsAy2OhcOv9e56LgaImSTtoxQ8u6tFRz9txzCp_WNz3ZFjNXF9CzZhiXyofqRllO5prqGJIe_pggsFjgbwW06GPrD9-f3A_WzPfkb2aJXIXISXs8VdIiry9zkSggLS0LPf7tOOZJ6W6MpWmA3TQRPQxqZUzeNpzdQ3bQzFWm2Uc9l3QgZmlBy1ZauMXPyfqUMLHvGymjTnPajXvssykviAC1WB-KX6J-8OnPD4aryWg5IEe6ITeltHvCjQ6Bf6hkRpv0k05PmI5M4ZLskS2i76R2_lbJiI1178AEt473LQulIeWzY5aRAHP1ksaxr5ilKSuIkUE4JzF_QF_9L4Q1_d8mPnrqZYjUaFV7ZbbFFwOF7_wjhGDmEFUz8gY25cH1tdDmTL_oXBUJRVj1q6a_ccDTPkwF0lJydEBKR4NZrwXwNi9mJ4q0amOCPdpGWm0E", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "182b2a19-64c2-4c34-a600-7c11ebd44c31", "record_id": "flaws_cloudtrail:0000374:182b2a19-64c2-4c34-a600-7c11ebd44c31", "row_index": 374, "timestamp": "2018-04-16T11:12:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "182b2a19-64c2-4c34-a600-7c11ebd44c31", "eventTime": "2018-04-16T11:12:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d1413e9-364b-40a8-abca-af863276894e", "record_id": "flaws_cloudtrail:0000375:1d1413e9-364b-40a8-abca-af863276894e", "row_index": 375, "timestamp": "2018-04-16T11:12:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d1413e9-364b-40a8-abca-af863276894e", "eventTime": "2018-04-16T11:12:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "528984c-989a-497a-8783-e86695f4ce", "record_id": "flaws_cloudtrail:0000376:528984c-989a-497a-8783-e86695f4ce", "row_index": 376, "timestamp": "2018-04-16T11:12:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "528984c-989a-497a-8783-e86695f4ce", "eventTime": "2018-04-16T11:12:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e32038d-9153-4148-aa34-2d74d4fd6a90", "record_id": "flaws_cloudtrail:0000377:e32038d-9153-4148-aa34-2d74d4fd6a90", "row_index": 377, "timestamp": "2018-04-16T11:12:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e32038d-9153-4148-aa34-2d74d4fd6a90", "eventTime": "2018-04-16T11:12:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8c5d2b0-b7c9-4f54-aecd-1695cd6d9bd8", "record_id": "flaws_cloudtrail:0000378:d8c5d2b0-b7c9-4f54-aecd-1695cd6d9bd8", "row_index": 378, "timestamp": "2018-04-16T11:12:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8c5d2b0-b7c9-4f54-aecd-1695cd6d9bd8", "eventTime": "2018-04-16T11:12:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4a76719-ad01-4a1c-9078-e6b2224e783b", "record_id": "flaws_cloudtrail:0000379:a4a76719-ad01-4a1c-9078-e6b2224e783b", "row_index": 379, "timestamp": "2018-04-16T11:12:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4a76719-ad01-4a1c-9078-e6b2224e783b", "eventTime": "2018-04-16T11:12:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "413c0625-c170-4517-934f-1cdd6b49a26a", "record_id": "flaws_cloudtrail:0000380:413c0625-c170-4517-934f-1cdd6b49a26a", "row_index": 380, "timestamp": "2018-04-16T11:12:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "413c0625-c170-4517-934f-1cdd6b49a26a", "eventTime": "2018-04-16T11:12:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c485c86-e4f8-4d0b-9c10-beb4e4c58f6b", "record_id": "flaws_cloudtrail:0000381:1c485c86-e4f8-4d0b-9c10-beb4e4c58f6b", "row_index": 381, "timestamp": "2018-04-16T11:12:19Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c485c86-e4f8-4d0b-9c10-beb4e4c58f6b", "eventTime": "2018-04-16T11:12:19Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "607c0cd2-884c-45d3-8683-2c388125c6e", "record_id": "flaws_cloudtrail:0000382:607c0cd2-884c-45d3-8683-2c388125c6e", "row_index": 382, "timestamp": "2018-04-16T11:12:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1269, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "607c0cd2-884c-45d3-8683-2c388125c6e", "eventTime": "2018-04-16T11:12:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a8a8780-3321-4cc6-9a97-49f95421de", "record_id": "flaws_cloudtrail:0000383:9a8a8780-3321-4cc6-9a97-49f95421de", "row_index": 383, "timestamp": "2018-04-16T11:12:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1924, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a8a8780-3321-4cc6-9a97-49f95421de", "eventTime": "2018-04-16T11:12:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: -dVjz3DUuaaF0zScrBoxpTFTv6c077mVH2LaFowrRC4Qvs5Dgygv_opqh6GtdELg-oShJhXYlmvPxl40aJbwIF2EMhAWRKZpyjkgWWU-i09yOY2v-TZqYS0FbRrelPcXDalASg00q0dTIO-gkuKnNnOpHjJ8aytqr8FiNujFbufnvOIHVcjXwuDRSy0I56RwpXvFmz__jpoa2O1NKSnKzVpVBuNR3ajSHoVi3fydtdE87QpkyqEQdjT0iEqhT2wsnZShVHLDV_XnFQvahAZBks-U78_uJGfkapk84o3_unQATQ3Q0M4W_8ZDFg6TsW2yuXYcDuXAsY2qYUn2nxfSA1zRq5n9OAYSJqXz-BEsJosseIQRNrx-_dw3It5qjjK73yfTSx7eYHgiJpuzKa1-a4Q-kLPVHS4cLBIVEpKaYKP8wgHh2UlacAfylEJ3nZEmR_YzKxrqpccRiwEtWTTbqD-60fyMYnFpdstCjm1Qn4njDAe4DVfzYFR4Dp9KMgKKA1Pvl7GEBUpcMraDC21bQSWbJwe2pZVztkS5dD3GK-13MV-VhiehhM3VcSufs5wwg43RAKQgEK-shV9QTU-qi6lQZi9RoDsKv2nVTRXclBQUWy03UY3kyqd1V16pL5fw2sXtoNfydFRXc7M2vOVr-qccEV-EjRJ3_A", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16bde1e2-c877-4d82-a23b-7d73b7230f83", "record_id": "flaws_cloudtrail:0000384:16bde1e2-c877-4d82-a23b-7d73b7230f83", "row_index": 384, "timestamp": "2018-04-16T11:12:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16bde1e2-c877-4d82-a23b-7d73b7230f83", "eventTime": "2018-04-16T11:12:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0655cd75-a88f-4cef-bdca-99a766229139", "record_id": "flaws_cloudtrail:0000385:0655cd75-a88f-4cef-bdca-99a766229139", "row_index": 385, "timestamp": "2018-04-16T11:12:22Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 906, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0655cd75-a88f-4cef-bdca-99a766229139", "eventTime": "2018-04-16T11:12:22Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47df68e3-dbf2-47e6-94df-35be9977022b", "record_id": "flaws_cloudtrail:0000386:47df68e3-dbf2-47e6-94df-35be9977022b", "row_index": 386, "timestamp": "2018-04-16T11:12:22Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47df68e3-dbf2-47e6-94df-35be9977022b", "eventTime": "2018-04-16T11:12:22Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b59c02a0-ecde-48fd-8062-84cdf352da57", "record_id": "flaws_cloudtrail:0000387:b59c02a0-ecde-48fd-8062-84cdf352da57", "row_index": 387, "timestamp": "2018-04-16T11:12:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b59c02a0-ecde-48fd-8062-84cdf352da57", "eventTime": "2018-04-16T11:12:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d86798e1-087f-45f1-9449-8a22373e2d19", "record_id": "flaws_cloudtrail:0000388:d86798e1-087f-45f1-9449-8a22373e2d19", "row_index": 388, "timestamp": "2018-04-16T11:12:24Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d86798e1-087f-45f1-9449-8a22373e2d19", "eventTime": "2018-04-16T11:12:24Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "886b5059-9ff5-42ca-95c8-cda799159fd80", "record_id": "flaws_cloudtrail:0000389:886b5059-9ff5-42ca-95c8-cda799159fd80", "row_index": 389, "timestamp": "2018-04-16T11:12:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "886b5059-9ff5-42ca-95c8-cda799159fd80", "eventTime": "2018-04-16T11:12:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccdd2869-ad7d-4269-8f37-f315f5dd0ee1", "record_id": "flaws_cloudtrail:0000390:ccdd2869-ad7d-4269-8f37-f315f5dd0ee1", "row_index": 390, "timestamp": "2018-04-16T11:12:26Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccdd2869-ad7d-4269-8f37-f315f5dd0ee1", "eventTime": "2018-04-16T11:12:26Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d811b7bb-8010-4cc0-9601-f9be9e04e510", "record_id": "flaws_cloudtrail:0000391:d811b7bb-8010-4cc0-9601-f9be9e04e510", "row_index": 391, "timestamp": "2018-04-16T11:12:26Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d811b7bb-8010-4cc0-9601-f9be9e04e510", "eventTime": "2018-04-16T11:12:26Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51933d-9868-4dda-9550-20ffd7ce05b6", "record_id": "flaws_cloudtrail:0000392:51933d-9868-4dda-9550-20ffd7ce05b6", "row_index": 392, "timestamp": "2018-04-16T11:12:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51933d-9868-4dda-9550-20ffd7ce05b6", "eventTime": "2018-04-16T11:12:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3414ceda-abdb-47e9-a8d1-08906ddd8", "record_id": "flaws_cloudtrail:0000393:3414ceda-abdb-47e9-a8d1-08906ddd8", "row_index": 393, "timestamp": "2018-04-16T11:12:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1380, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3414ceda-abdb-47e9-a8d1-08906ddd8", "eventTime": "2018-04-16T11:12:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccd13bea-983e-4037-a3f2-3a25a37c5a15", "record_id": "flaws_cloudtrail:0000394:ccd13bea-983e-4037-a3f2-3a25a37c5a15", "row_index": 394, "timestamp": "2018-04-16T11:12:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccd13bea-983e-4037-a3f2-3a25a37c5a15", "eventTime": "2018-04-16T11:12:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "881a9eca-1002-4076-92ac-cfdb48c6fd35", "record_id": "flaws_cloudtrail:0000395:881a9eca-1002-4076-92ac-cfdb48c6fd35", "row_index": 395, "timestamp": "2018-04-16T11:12:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "881a9eca-1002-4076-92ac-cfdb48c6fd35", "eventTime": "2018-04-16T11:12:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: yV4w-IOx2pK_oZH2VLgOr3nKgMcR8_m0kpcKU5uta4DKyb6fvUGdCxtHGv--P-KDVmmkPP1vr1JXVcRLpxsZ7UiywON89u5bjCcXZmzdv1g50GkPr3tih76AhKgtdaqA8ttRMzjtcz77mF6TcL-e7OvK0rz8vY_mdwdbo4cZEqBFW9eIeuwIgWf-9vGiH7gVtyZKkvcCo7tEoHJCdRzEEsQbhaWpxiuUoWGb2wnOFduwkpvlHTGweEFrBJ7wDVEswUbhKKqMXO7eIDaSJsNgw5ZAiGVqpfRtPIQ6weQip0cURRjVUxGbGZd5Px8F6F6lRfYC37e2prmsh7jRFBc7pEKntXNCRR8FxN1tIwLkBDWpUvOYXHYfXpYJkeyqGzqc-FYJIf-9sQI_HWLAiZjbdDgIOcuBgqcmh9PreC9hOthdaC0-GnthaZxyudN-et44ymGTQaWiudhshPwUMTl0I0hfqcamgtuCIHoocRX9yr9D5g8DkoZt9oEiaSP7IPFYiCNYKFTZLpazNb90ldBZdUnHa1G8loVR1J-GbbDazVnbvIL13vfFX1kZ8UbYMs_ohBSbWYmyavlGJRCMjpsj-2SYPEVlSKr7OvCCDTUROK3r5qsFisBlosgBqHvTYaCaVCb394Wg4YTnFx8xRzC4C7LCi1ELQuloK6pcEbo", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90434e41-3ff1-4fcc-90c5-7fbe09c94c70", "record_id": "flaws_cloudtrail:0000396:90434e41-3ff1-4fcc-90c5-7fbe09c94c70", "row_index": 396, "timestamp": "2018-04-16T11:12:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90434e41-3ff1-4fcc-90c5-7fbe09c94c70", "eventTime": "2018-04-16T11:12:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97f617241-3f7d-4a88-bd8d-63fa9db20bf3", "record_id": "flaws_cloudtrail:0000397:97f617241-3f7d-4a88-bd8d-63fa9db20bf3", "row_index": 397, "timestamp": "2018-04-16T11:12:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97f617241-3f7d-4a88-bd8d-63fa9db20bf3", "eventTime": "2018-04-16T11:12:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "340db9ce-a652-4f1a-9f4f-9fd7bea86a78", "record_id": "flaws_cloudtrail:0000398:340db9ce-a652-4f1a-9f4f-9fd7bea86a78", "row_index": 398, "timestamp": "2018-04-16T11:12:31Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "340db9ce-a652-4f1a-9f4f-9fd7bea86a78", "eventTime": "2018-04-16T11:12:31Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f16ff90-b697-40a0-8557-78b2cd8efe31", "record_id": "flaws_cloudtrail:0000399:2f16ff90-b697-40a0-8557-78b2cd8efe31", "row_index": 399, "timestamp": "2018-04-16T11:12:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1374, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f16ff90-b697-40a0-8557-78b2cd8efe31", "eventTime": "2018-04-16T11:12:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "295014c0-1066-4dea-afa8-efa4f89807fb", "record_id": "flaws_cloudtrail:0000400:295014c0-1066-4dea-afa8-efa4f89807fb", "row_index": 400, "timestamp": "2018-04-16T11:12:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "295014c0-1066-4dea-afa8-efa4f89807fb", "eventTime": "2018-04-16T11:12:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f97fe920-f42e-4e99-9539-eb00808a", "record_id": "flaws_cloudtrail:0000401:f97fe920-f42e-4e99-9539-eb00808a", "row_index": 401, "timestamp": "2018-04-16T11:12:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f97fe920-f42e-4e99-9539-eb00808a", "eventTime": "2018-04-16T11:12:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "725e47b4-0cf1-47dc-91bb-e82bbb89d102", "record_id": "flaws_cloudtrail:0000402:725e47b4-0cf1-47dc-91bb-e82bbb89d102", "row_index": 402, "timestamp": "2018-04-16T11:12:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "725e47b4-0cf1-47dc-91bb-e82bbb89d102", "eventTime": "2018-04-16T11:12:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8b31e80-d2d3-4e1d-829b-b6088fc9e0ef", "record_id": "flaws_cloudtrail:0000403:f8b31e80-d2d3-4e1d-829b-b6088fc9e0ef", "row_index": 403, "timestamp": "2018-04-16T11:12:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8b31e80-d2d3-4e1d-829b-b6088fc9e0ef", "eventTime": "2018-04-16T11:12:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4adad4a0-2443-4ca7-95ad-e574c8664aee", "record_id": "flaws_cloudtrail:0000404:4adad4a0-2443-4ca7-95ad-e574c8664aee", "row_index": 404, "timestamp": "2018-04-16T11:12:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4adad4a0-2443-4ca7-95ad-e574c8664aee", "eventTime": "2018-04-16T11:12:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "123bb4cd-5562-43fd-84f8-7bbca777b8ad", "record_id": "flaws_cloudtrail:0000405:123bb4cd-5562-43fd-84f8-7bbca777b8ad", "row_index": 405, "timestamp": "2018-04-16T11:12:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1924, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "123bb4cd-5562-43fd-84f8-7bbca777b8ad", "eventTime": "2018-04-16T11:12:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: CdMDLExb6w6vQr2hU0exXKkttmpRhLoMeWt94p6dWWdrNQyuSYA7Gjp1G-FKwOSgAGHFPwqS0gvaQDZHgkKuftUeWlWZ3elZU9L6TnyEvOhxGC2PIXYnHpWH8mRoQqm0P0UoPa6gE2d6U8PNMxQiQiG4x8Mmta6YRfsCPok8a8cgekR-tHXsySfKr6PdnQDWcVIqnE0KgoM4OWabpCiEX0zZXpgyE2CLJlR_MOm-m38zGWg3o5Bv8RBqm1bUsGASncB4LU2EICoKGbSWkvgQv1foNQu4kfZ83SKIusuzAMykkFDvzHoB5ynoYxdPEDadodXwDzQhK4ohUamHXIMIl2H_tWIuHug1FDH3GFVR3wBZeJxzvHdjzW71-uE0_U4FlC1mtV7CIQlO10cktlWp6biUEwyqhjtYwwDN0VIwuupoD_Z3vi7veFvDn_ajTMtB89BRXJ6WgKxj8ij4MYCWG-0vmZqv2DRkiV_uP-ocxtndg1x4f_Nn_CKqoaaFZFBoh_gP1qdnRh0B4CvW1KAShzFE54huEncLsfHGrPXUjBcMvvmDVRY0HFOuTfKkTdjPxdL3inTuAj6SsM7Jw_0NldFYsQ8sb2MjI3f3oKDTqM2rA9H7rEnUPKp3wGs6BZeeDRUycQfLtMKFl2ZMgK6_QSMXkYDXef-l", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a6fc7d2-cf84-4c10-88d0-f3d1b63cdfd5", "record_id": "flaws_cloudtrail:0000406:9a6fc7d2-cf84-4c10-88d0-f3d1b63cdfd5", "row_index": 406, "timestamp": "2018-04-16T11:12:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a6fc7d2-cf84-4c10-88d0-f3d1b63cdfd5", "eventTime": "2018-04-16T11:12:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad37e1a2-5e93-4f1e-bedf-08d31eef83be", "record_id": "flaws_cloudtrail:0000407:ad37e1a2-5e93-4f1e-bedf-08d31eef83be", "row_index": 407, "timestamp": "2018-04-16T11:12:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad37e1a2-5e93-4f1e-bedf-08d31eef83be", "eventTime": "2018-04-16T11:12:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1e29f26-5fcb-430b-99c8-fc54e8f6f4ca", "record_id": "flaws_cloudtrail:0000408:d1e29f26-5fcb-430b-99c8-fc54e8f6f4ca", "row_index": 408, "timestamp": "2018-04-16T11:12:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1e29f26-5fcb-430b-99c8-fc54e8f6f4ca", "eventTime": "2018-04-16T11:12:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faf4bc3b-dd0f-4d39-9b09-f61cce7d873b", "record_id": "flaws_cloudtrail:0000409:faf4bc3b-dd0f-4d39-9b09-f61cce7d873b", "row_index": 409, "timestamp": "2018-04-16T11:12:41Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faf4bc3b-dd0f-4d39-9b09-f61cce7d873b", "eventTime": "2018-04-16T11:12:41Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc8f78be-3bbd-4775-8343-d96c77089b", "record_id": "flaws_cloudtrail:0000410:bc8f78be-3bbd-4775-8343-d96c77089b", "row_index": 410, "timestamp": "2018-04-16T11:12:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc8f78be-3bbd-4775-8343-d96c77089b", "eventTime": "2018-04-16T11:12:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ab339518-6ea7-4a32-8d3f-ca6fdac81701", "record_id": "flaws_cloudtrail:0000411:2ab339518-6ea7-4a32-8d3f-ca6fdac81701", "row_index": 411, "timestamp": "2018-04-16T11:12:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1380, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ab339518-6ea7-4a32-8d3f-ca6fdac81701", "eventTime": "2018-04-16T11:12:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac1a6f5c-d129-4811-80e9-f9379dbb8cc2", "record_id": "flaws_cloudtrail:0000412:ac1a6f5c-d129-4811-80e9-f9379dbb8cc2", "row_index": 412, "timestamp": "2018-04-16T11:12:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac1a6f5c-d129-4811-80e9-f9379dbb8cc2", "eventTime": "2018-04-16T11:12:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11a9f280-2ecd-4e05-9b03-65fd57e1691c", "record_id": "flaws_cloudtrail:0000413:11a9f280-2ecd-4e05-9b03-65fd57e1691c", "row_index": 413, "timestamp": "2018-04-16T11:12:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1375, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11a9f280-2ecd-4e05-9b03-65fd57e1691c", "eventTime": "2018-04-16T11:12:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "675c29a9-8da7-40c5-a22b-dcb9eb65ae8b", "record_id": "flaws_cloudtrail:0000414:675c29a9-8da7-40c5-a22b-dcb9eb65ae8b", "row_index": 414, "timestamp": "2018-04-16T11:12:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1273, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "675c29a9-8da7-40c5-a22b-dcb9eb65ae8b", "eventTime": "2018-04-16T11:12:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a37fbab-b700-4832-9d28-3b39a3831cfa", "record_id": "flaws_cloudtrail:0000415:4a37fbab-b700-4832-9d28-3b39a3831cfa", "row_index": 415, "timestamp": "2018-04-16T11:12:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a37fbab-b700-4832-9d28-3b39a3831cfa", "eventTime": "2018-04-16T11:12:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf5ecc3f-c5ce-43e2-91d8-65eb103c7eea", "record_id": "flaws_cloudtrail:0000416:cf5ecc3f-c5ce-43e2-91d8-65eb103c7eea", "row_index": 416, "timestamp": "2018-04-16T11:12:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf5ecc3f-c5ce-43e2-91d8-65eb103c7eea", "eventTime": "2018-04-16T11:12:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cae712a-6325-49f4-8c1e-5572d8738798", "record_id": "flaws_cloudtrail:0000417:7cae712a-6325-49f4-8c1e-5572d8738798", "row_index": 417, "timestamp": "2018-04-16T11:12:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1924, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cae712a-6325-49f4-8c1e-5572d8738798", "eventTime": "2018-04-16T11:12:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: wwRXQYsJ4TZdjaYKkx3W5K9nfOmzbX7vZwHgqZ29Li4veE-e5TWt95rn-otsJyeRg8OToBrkePOPdnS4sOXfV2-pf1egvdQODjaKp5f_hBmchdd5zyp6SXJAc9Oyr0jejNYSjYpttDLvvB8uMG4tWW5n4bEvo5_OGaPd6ZnOlQGqhGWNPX2HCBkuaDI6QhD1bxFZjvUuURiAsO4xhUnXWuashfSHd2LFovsbY5mpGkw2w3jK2QSg5J4G1m-pEXWndVULkaudRXD9hCdebu7oSaVANnFCnfIqgWo6G5eoWQ2O_4kS5Xk2kYijosZht_LaFA1eAAQbzMVbFXa5sBw5pjqjFHJjBGjd5pTjCRW7nJIjIYqxJax2ioFpVZt4vO2UdwNKPRxZ6-T8ac2KHrHBvAySnH3czgzfEBpaVU31AHZhOsm-lsBH0sOo7Lh4oS8uJZKVF_oAcw5GnSrH9xJyXghN5QAuodKP-19CDjfb_qtq2ALiMzLrIWQwtq6K92OC-McJAdaDoeU2PLcJgJcsZ8Rr9rRWp1EJLbcneUnGUcjKJzSR0YHQbbbg4QFynDDrnnczFP6ZanYGq-BvvFasy14pFMFElFlkQmZcE42UyD7SIQQ11_GIigyLiuO6Ollte6U-vQqqK_jTTOCQZrAM-oRv0zCCAuvHqWc", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3fe0a40-486d-40bc-9699-1d5a5e60ad24", "record_id": "flaws_cloudtrail:0000418:c3fe0a40-486d-40bc-9699-1d5a5e60ad24", "row_index": 418, "timestamp": "2018-04-16T11:12:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1931, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3fe0a40-486d-40bc-9699-1d5a5e60ad24", "eventTime": "2018-04-16T11:12:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: _qQjatyjt49xe3vlHnzFpPkY1KWR5n5OmuEXmYgVSgHulcI0CyofxLXZE6OLa45X8HqBOkqJ0g5-Ki4fzA3cPCldND4iOKKY_BSn_JnJs9Ko0b4S_yVGPIyeCV6ohCWdhxDJqMZgb2jeG5Gk3AJqC4avL7gLuBoK-GvWHuNJ-ixTDDXj_S5qH3kg6uw6NnJTm2MsnyZUT713yH51Ch9iOTpPdOXGWGfUNyOHQsB4T16vyKDhX_10NZBZLl5tNxOn2som-dtpdApvWgSATFva28Dv4AofU7SWSUkbHt3hQipxcqEolYIJDnv30z1L7UwBnQ7_ECdSd5fNQUQCnfenJV8w4jsUCm_Q3V-gjMyBQM_Bp_957E6mIedHtuKlIIyIZvNTdZdtaPaVnouGemyaxxOpZY1RNUrX3FDsQEFi76aTj0cC2o49lESqgUPrjkQxCZ1WJ1kL48XAQkB9pHzqRBtrzkaxeShN9GIUVChJz1KKaLprUKdWZCYdsNuzDjn3GAHaE0ubzx6aK4GXSrEvFNeAN0_UM6tLZ9Vg5x2A3N8O0w9ukw7V-T8JMKb7KbI7RAENnarw5ZxWc3JLIPu8n3sjJuM5o0k72N9Jkn41dQ7pfwSfJYeC5WCCQl8tW-y9366QJWo3dLlwDVA9iX3LkZ6UeThvNCWBBF1_", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ddda46c-a8b2-4c87-ba83-f8aa2db30e44", "record_id": "flaws_cloudtrail:0000419:6ddda46c-a8b2-4c87-ba83-f8aa2db30e44", "row_index": 419, "timestamp": "2018-04-16T11:12:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1925, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ddda46c-a8b2-4c87-ba83-f8aa2db30e44", "eventTime": "2018-04-16T11:12:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: PcW7tpHHaaco_wlWM7vGuFD0nhQg9lgKL_fzDB7c3at-HjkyAX3s_EPlfw_GzOjvKkKlsM5c-Zf3pz60KeEjjfGS1wIXinM5NC8Q-l5PqmUQ34BjN8WIQ2gxwWDj6ylxfS7P9Eu9Xk9f7I-SqOvG125hP5cLMUWIyfjB1Bq-YTyrGaDuI7G2h1H636c9QAZCYT6u9x0vAnRvH3tmd_qbyCRWYSG3jr0OsKVCUrpyKDIYyRcA3MTea0F30dLto0H4nydLlG9-P_Ci6yhzrFNtALEHbLZ-XII4DK-KWtvm3Kn4Yiz57yxlbDYVpI0ilZ-bC0dWmffpMk7VOg-Bkd7BU0Om9I9xSTL-ot6OdVO07Z244hT25UaPbPX8ildRYqOULs3GvS2rw-eV2lyB_y0fIp_vF3zvX7mdJUg2IsMUJwkwtFn-vCMdBs0CC_7Tj3kDLbYWJkh_QpgTr2LmF5Vp5sr8wGlVXgEDulbomqG2uV-tKmzNOrqR231CwDMi4k64tR8omw1UERHbmynDB3xiJ4MvnBT8tIFU8QRoAfTtaKyCc_oUlrIHRU3e_qbgYkse9hPW_tTh1hxdFfvhQjowsRlDfsXlqIQNaQLZZEQcQh6T5t1s-Sk9u-2mL7UD3oGPWIxlkYs5xMwUwpoQZDjObKGUhciOhHL8dQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc9619db-3119-4aa6-9e54-b7cfda3e7b2e", "record_id": "flaws_cloudtrail:0000420:dc9619db-3119-4aa6-9e54-b7cfda3e7b2e", "row_index": 420, "timestamp": "2018-04-16T11:12:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc9619db-3119-4aa6-9e54-b7cfda3e7b2e", "eventTime": "2018-04-16T11:12:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4555ae93-0248-4dfb-8b43-3d1f2601ff5d", "record_id": "flaws_cloudtrail:0000421:4555ae93-0248-4dfb-8b43-3d1f2601ff5d", "row_index": 421, "timestamp": "2018-04-16T11:12:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4555ae93-0248-4dfb-8b43-3d1f2601ff5d", "eventTime": "2018-04-16T11:12:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "789aa79d-26ab-434d-868e-85eb93aa4d94", "record_id": "flaws_cloudtrail:0000422:789aa79d-26ab-434d-868e-85eb93aa4d94", "row_index": 422, "timestamp": "2018-04-16T11:13:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "789aa79d-26ab-434d-868e-85eb93aa4d94", "eventTime": "2018-04-16T11:13:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5738bdb-11f6-4bd1-b318-9d8c8a513c5c", "record_id": "flaws_cloudtrail:0000423:c5738bdb-11f6-4bd1-b318-9d8c8a513c5c", "row_index": 423, "timestamp": "2018-04-16T11:13:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5738bdb-11f6-4bd1-b318-9d8c8a513c5c", "eventTime": "2018-04-16T11:13:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0ff6c16-0f40-4f72-a8ef-a2ad561e4531", "record_id": "flaws_cloudtrail:0000424:c0ff6c16-0f40-4f72-a8ef-a2ad561e4531", "row_index": 424, "timestamp": "2018-04-16T11:13:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0ff6c16-0f40-4f72-a8ef-a2ad561e4531", "eventTime": "2018-04-16T11:13:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dc1ae47-6996-49a9-a2bc-47685284bec2", "record_id": "flaws_cloudtrail:0000425:0dc1ae47-6996-49a9-a2bc-47685284bec2", "row_index": 425, "timestamp": "2018-04-16T11:13:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dc1ae47-6996-49a9-a2bc-47685284bec2", "eventTime": "2018-04-16T11:13:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef3c1623-51f1-4664-8783-b55f1926f1a0", "record_id": "flaws_cloudtrail:0000426:ef3c1623-51f1-4664-8783-b55f1926f1a0", "row_index": 426, "timestamp": "2018-04-16T11:14:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef3c1623-51f1-4664-8783-b55f1926f1a0", "eventTime": "2018-04-16T11:14:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68d0635f-3fd1-4824-b58f-488de59900e1", "record_id": "flaws_cloudtrail:0000427:68d0635f-3fd1-4824-b58f-488de59900e1", "row_index": 427, "timestamp": "2018-04-16T11:14:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68d0635f-3fd1-4824-b58f-488de59900e1", "eventTime": "2018-04-16T11:14:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03ad01e5-e938-4048-841c-c48294a49e6b", "record_id": "flaws_cloudtrail:0000428:03ad01e5-e938-4048-841c-c48294a49e6b", "row_index": 428, "timestamp": "2018-04-16T11:14:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03ad01e5-e938-4048-841c-c48294a49e6b", "eventTime": "2018-04-16T11:14:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ada0416-a00b-449c-8f8b-08f9c027e9c8", "record_id": "flaws_cloudtrail:0000429:2ada0416-a00b-449c-8f8b-08f9c027e9c8", "row_index": 429, "timestamp": "2018-04-16T11:14:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ada0416-a00b-449c-8f8b-08f9c027e9c8", "eventTime": "2018-04-16T11:14:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cddce17-50aa-4a69-a446-615cf6e0e9c0", "record_id": "flaws_cloudtrail:0000430:5cddce17-50aa-4a69-a446-615cf6e0e9c0", "row_index": 430, "timestamp": "2018-04-16T11:14:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1928, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cddce17-50aa-4a69-a446-615cf6e0e9c0", "eventTime": "2018-04-16T11:14:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 01IzCtK4jxqvSnTTWNeJ9fV2YrkRBNYrClIUeV0mD-cN3M-O7En7XW8mhZwxsSG4C46RUx-wFEp6eC_dsf8XOmWFtGfhrcvkcVYcZUUxLRGVbH1bsgn7ez0sJJw7wnKq_G_Ul9emBTWSoSGpnMe6xpU07Vy76E_-HtyHCWt8rY94iS5P7SdyaT3MmE_yNyMycu-7T3M51H9t_nPxNxa7pR6A4LWXsdVmUgHM2Rwfgyu6L4va6eB1LJ_IMdLZIuUDeJG3LmlZTgqUlASatf6AmU1SfZ6UjP70R6cDkgObY9skwJ8B-UDh-L9IGI3TLgwyQb7Cm3XehB8-sn09eZkgtjM6NUY6fL17j29ashhgEc75ewdJ30hKeJY8D4GXFwbvcCObhfVrmj_SQWBkeVnU98t_nYCclLbMQdYAMG6L3g3n5eTyjyT4tmsjz1x6CSZJGdd53XgqFKJi_L_xjYplS7vGGSJjj2-GvtzbgBIS-ixv0mUuzJpqo5RONShrNCNAmCqBSX8rnmsDHRMOZHJFdJLDH2XY8yiyREv8xn_04so3sRf02wIc749_tmsPnEYeVnOcxcjsS_zUdyBKAzrxmt2amOXJ4ib6St6_koLEc_3PYJ2zqUN_MuV4d0Wb1ES4IfWG98frcfjkAbydRU9FRFz_E8H3Hbi4mVs", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eb50b55-0908-456d-aaa0-31f17e98a6e0", "record_id": "flaws_cloudtrail:0000431:1eb50b55-0908-456d-aaa0-31f17e98a6e0", "row_index": 431, "timestamp": "2018-04-16T11:15:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eb50b55-0908-456d-aaa0-31f17e98a6e0", "eventTime": "2018-04-16T11:15:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bde590f0-a898-46fb-87fa-f4b6a7584ad7", "record_id": "flaws_cloudtrail:0000432:bde590f0-a898-46fb-87fa-f4b6a7584ad7", "row_index": 432, "timestamp": "2018-04-16T11:15:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bde590f0-a898-46fb-87fa-f4b6a7584ad7", "eventTime": "2018-04-16T11:15:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75afcb4a-f8ec-478f-ba68-c0c9ba5b92e5", "record_id": "flaws_cloudtrail:0000433:75afcb4a-f8ec-478f-ba68-c0c9ba5b92e5", "row_index": 433, "timestamp": "2018-04-16T11:15:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1271, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75afcb4a-f8ec-478f-ba68-c0c9ba5b92e5", "eventTime": "2018-04-16T11:15:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63da9d12-f389-4368-80d6-3aa1e2bb4d88", "record_id": "flaws_cloudtrail:0000434:63da9d12-f389-4368-80d6-3aa1e2bb4d88", "row_index": 434, "timestamp": "2018-04-16T11:17:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1271, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63da9d12-f389-4368-80d6-3aa1e2bb4d88", "eventTime": "2018-04-16T11:17:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54c4dd9d-64eb-405e-99cd-4832e909a6ca", "record_id": "flaws_cloudtrail:0000435:54c4dd9d-64eb-405e-99cd-4832e909a6ca", "row_index": 435, "timestamp": "2018-04-16T11:17:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1925, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54c4dd9d-64eb-405e-99cd-4832e909a6ca", "eventTime": "2018-04-16T11:17:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: WgR_tPcWdFpcYXBqSA76pVG8V_igSKrFVTekHpR0AUZjMGS4QvYUZq2hmbggn0iM3dfLXb50vDCGdmYjRKWYLJzQMHgbR-O0p_X3t15mrQCJp9ywHpqNfXwwT7Q_Cl60ESKfDUWV3zw7Lq_AEl7uJzSw4pbCEmb5f8l1JPGQuBvThQC5tqoLVLhhfXNpulNRU_odB2pkK1M0A-QAFssrNFRPgEpz5jZV3yr7PztQU71hte_wp3LdmuUW2GEfhm2Tuemx90vDCr4Zkg6Z6k2KgU3K8ZRvAFvasGX3_L5l60FOq-Iq86fN3JQ1D5OryeRB4twYEK3kra1NWfWUb7Gd9_ae_7pzhNtg-b6bRYDXKG1PLKOoeUxmqLZNiwWjHk1VfVBZcQEhsvZ3gJLzvDoOkbL9z-y5IWY2-WVaL3GHwYBaLxsqQ9MmNRIxgQJIxoNEbUtpXkO1IyIwX9XKdp2hbDXLeWiE6-lEDfovW408jAdETeZvHjoI8U8IL5Rt8Rt0RocUBbU9vYrVQj7pJfXy9D4TO9UwTV_EBc62Lz--iVLiH0ul4Q5rXt6EHuowotK7QfuXlq9eBZPXlKdNIJ9zngNb0Ju7f4McWwiHLCDo6YqpNvuggA6oXyWEX2RppCWywVotciN4CSzwD6wC-n0WChE27UxdYxsE", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53eaaca0-22ac-465d-b59e-341733f02139", "record_id": "flaws_cloudtrail:0000436:53eaaca0-22ac-465d-b59e-341733f02139", "row_index": 436, "timestamp": "2018-04-16T11:18:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53eaaca0-22ac-465d-b59e-341733f02139", "eventTime": "2018-04-16T11:18:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96c2eae2-f1b9-4c9f-8df9-50cde2d2c334", "record_id": "flaws_cloudtrail:0000437:96c2eae2-f1b9-4c9f-8df9-50cde2d2c334", "row_index": 437, "timestamp": "2018-04-16T11:36:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1490, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96c2eae2-f1b9-4c9f-8df9-50cde2d2c334", "eventTime": "2018-04-16T11:36:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKK5TLIGAGU7P0MNW", "expiration": "Apr 16, 2018 6:03:53 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea47508-c7ed-4ae1-822d-517aa8d34864", "record_id": "flaws_cloudtrail:0000438:ea47508-c7ed-4ae1-822d-517aa8d34864", "row_index": 438, "timestamp": "2018-04-16T11:47:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea47508-c7ed-4ae1-822d-517aa8d34864", "eventTime": "2018-04-16T11:47:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXD2VWWTKFN5AGQ1W", "expiration": "Apr 16, 2018 12:47:14 PM", "sessionToken": "AgoGb3JpZ2luEFgaCXVzLXdlc3QtMiKAAlZ/v+mXDtI9X519KbE550fuuW+EcxztnIj/NI4O/pAwKuRYi+YqDEYmJB/p+bOsnIIfVewB7d4phaYJufx3xZFfVHXvlXhbH+JQPX40ZSQ7BEw7t259QoXYnwuhHwUCaFi6z2DDqthXruRLg/hWTtyYvkUGV/W5NUrAXCvnnmYzsVb+cYatNS6kGkiFST3qSAnAMnBmvyYF1bA5V7cpozv56jcOtlZxqKdhIco4/jB0Cp1Kjq5ge201aCOH4XkZm1rQTkuo2Ww4/WjYYnUP4xjhNDG3hG+FGP7IHHkc2055lwhUplX6CbNY4vXeoDPXkyiO+2xkONPuOdMg4g6T5Ckq8QIIjf//////////ARAAGgw5NzU0MjYyNjIwMjkiDFFMA6El907kSMYfMCrFAlp59o2Fc9zIStI5aDQ8zsUoeAHG8erqse5CKGkJw9Rl9sI6gSj7Ku096zMM5V7Qfe1jLBV8aFddziHaz/CHxhITmtn21d9d/0feL0csPJ1SmJMoYJ3Fry2y8p4y9bQ6Aj41M4OTo5VTaL0jM57Bk/p6LrefUjcu6wzieprsT6jWJgtpy9SrNnDUzLFnR23CVYwETq48/HoNrDMKpQ9gj7aLLkcUHNdtS3YXsXS6+1g9yqgIBJjcxZxGv3DjUcDcqilBJwrnk77vQIT0FeVfRFwBas+2pyX1ZhMxQg0j5Er3I/a1e+TFsXTDkgC+oP7+kf8A4PqirUNjh2FLbH5E07PuVp7hG0tJhQkPQSnCyjeDIHRLv4llfS4lCqBGySo+nxk1eAVKrNaZNkIqEpmJLvi1xHRqJ5UsK5OzIz7KFCq/vCNX8vUwwprS1gU="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce53b1d9-3851-4e05-82af-0975c7bff45c", "record_id": "flaws_cloudtrail:0000439:ce53b1d9-3851-4e05-82af-0975c7bff45c", "row_index": 439, "timestamp": "2018-04-16T11:53:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.214.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce53b1d9-3851-4e05-82af-0975c7bff45c", "eventTime": "2018-04-16T11:53:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.214.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c0edd13-aa7a-4988-9930-f6c9cf51a3f6", "record_id": "flaws_cloudtrail:0000440:9c0edd13-aa7a-4988-9930-f6c9cf51a3f6", "row_index": 440, "timestamp": "2018-04-16T11:54:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c0edd13-aa7a-4988-9930-f6c9cf51a3f6", "eventTime": "2018-04-16T11:54:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8be59567-ad36-47c8-a48d-772037ec3b23", "record_id": "flaws_cloudtrail:0000441:8be59567-ad36-47c8-a48d-772037ec3b23", "row_index": 441, "timestamp": "2018-04-16T11:54:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8be59567-ad36-47c8-a48d-772037ec3b23", "eventTime": "2018-04-16T11:54:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a3fdf58-15ad-491c-9e86-36293e1", "record_id": "flaws_cloudtrail:0000442:8a3fdf58-15ad-491c-9e86-36293e1", "row_index": 442, "timestamp": "2018-04-16T11:54:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a3fdf58-15ad-491c-9e86-36293e1", "eventTime": "2018-04-16T11:54:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "589337ae9-13b2-474b-901b-6f681e154ebb", "record_id": "flaws_cloudtrail:0000443:589337ae9-13b2-474b-901b-6f681e154ebb", "row_index": 443, "timestamp": "2018-04-16T11:54:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "589337ae9-13b2-474b-901b-6f681e154ebb", "eventTime": "2018-04-16T11:54:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad359f7f-9f55-46c8-9576-d57036", "record_id": "flaws_cloudtrail:0000444:ad359f7f-9f55-46c8-9576-d57036", "row_index": 444, "timestamp": "2018-04-16T11:54:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad359f7f-9f55-46c8-9576-d57036", "eventTime": "2018-04-16T11:54:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d1689c2-525f-4c0c-ae7d-8aa850316a6e", "record_id": "flaws_cloudtrail:0000445:0d1689c2-525f-4c0c-ae7d-8aa850316a6e", "row_index": 445, "timestamp": "2018-04-16T11:54:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d1689c2-525f-4c0c-ae7d-8aa850316a6e", "eventTime": "2018-04-16T11:54:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e24448ac-91e3-4528-b2bb-8abd6b43c514", "record_id": "flaws_cloudtrail:0000446:e24448ac-91e3-4528-b2bb-8abd6b43c514", "row_index": 446, "timestamp": "2018-04-16T11:54:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e24448ac-91e3-4528-b2bb-8abd6b43c514", "eventTime": "2018-04-16T11:54:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d612a96f-15e9-4d46-9bd2-576bbc4fb1bb", "record_id": "flaws_cloudtrail:0000447:d612a96f-15e9-4d46-9bd2-576bbc4fb1bb", "row_index": 447, "timestamp": "2018-04-16T11:54:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d612a96f-15e9-4d46-9bd2-576bbc4fb1bb", "eventTime": "2018-04-16T11:54:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c290a6c5-a84e-4fd4-87f5-05ae1e77693a", "record_id": "flaws_cloudtrail:0000448:c290a6c5-a84e-4fd4-87f5-05ae1e77693a", "row_index": 448, "timestamp": "2018-04-16T11:54:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c290a6c5-a84e-4fd4-87f5-05ae1e77693a", "eventTime": "2018-04-16T11:54:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59ae7917-32cf-45a5-928f-0eb2a1419329", "record_id": "flaws_cloudtrail:0000449:59ae7917-32cf-45a5-928f-0eb2a1419329", "row_index": 449, "timestamp": "2018-04-16T11:54:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59ae7917-32cf-45a5-928f-0eb2a1419329", "eventTime": "2018-04-16T11:54:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4629be3-3a9a-4f4d-800d-c94d5941f21e", "record_id": "flaws_cloudtrail:0000450:b4629be3-3a9a-4f4d-800d-c94d5941f21e", "row_index": 450, "timestamp": "2018-04-16T11:54:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4629be3-3a9a-4f4d-800d-c94d5941f21e", "eventTime": "2018-04-16T11:54:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c54e69a1-159b-4eb6-b4b8-0a1702a8849e", "record_id": "flaws_cloudtrail:0000451:c54e69a1-159b-4eb6-b4b8-0a1702a8849e", "row_index": 451, "timestamp": "2018-04-16T11:54:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c54e69a1-159b-4eb6-b4b8-0a1702a8849e", "eventTime": "2018-04-16T11:54:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5179f237-24e0-4d3c-b00b-ac95a3a19f9a", "record_id": "flaws_cloudtrail:0000452:5179f237-24e0-4d3c-b00b-ac95a3a19f9a", "row_index": 452, "timestamp": "2018-04-16T11:54:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5179f237-24e0-4d3c-b00b-ac95a3a19f9a", "eventTime": "2018-04-16T11:54:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c419a983-c23b-40d8-b3bf-2d4fe8c943d6", "record_id": "flaws_cloudtrail:0000453:c419a983-c23b-40d8-b3bf-2d4fe8c943d6", "row_index": 453, "timestamp": "2018-04-16T11:54:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c419a983-c23b-40d8-b3bf-2d4fe8c943d6", "eventTime": "2018-04-16T11:54:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.InvalidSubnetID.NotFound", "errorMessage": "The subnet ID 'subnet-7f84efeb' does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "subnetId": "subnet-7f84efeb", "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5225cb08-4184-4944-979a-f70ed2608522", "record_id": "flaws_cloudtrail:0000454:5225cb08-4184-4944-979a-f70ed2608522", "row_index": 454, "timestamp": "2018-04-16T11:54:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5225cb08-4184-4944-979a-f70ed2608522", "eventTime": "2018-04-16T11:54:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.InvalidSubnetID.NotFound", "errorMessage": "The subnet ID 'subnet-7f84efeb' does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "subnetId": "subnet-7f84efeb", "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ab35713-cd75-4afb-828e-119671be263d", "record_id": "flaws_cloudtrail:0000455:4ab35713-cd75-4afb-828e-119671be263d", "row_index": 455, "timestamp": "2018-04-16T11:54:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ab35713-cd75-4afb-828e-119671be263d", "eventTime": "2018-04-16T11:54:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.InvalidSubnetID.NotFound", "errorMessage": "The subnet ID 'subnet-7f84efeb' does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.16xlarge", "monitoring": {"enabled": false}, "subnetId": "subnet-7f84efeb", "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d01b3c0-7712-4b0b-b318-158a4822da27", "record_id": "flaws_cloudtrail:0000456:4d01b3c0-7712-4b0b-b318-158a4822da27", "row_index": 456, "timestamp": "2018-04-16T11:54:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d01b3c0-7712-4b0b-b318-158a4822da27", "eventTime": "2018-04-16T11:54:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.InvalidSubnetID.NotFound", "errorMessage": "The subnet ID 'subnet-7f84efeb' does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.16xlarge", "monitoring": {"enabled": false}, "subnetId": "subnet-7f84efeb", "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e8389dc-97cd-47e6-850d-e7cad0a16fdf", "record_id": "flaws_cloudtrail:0000457:1e8389dc-97cd-47e6-850d-e7cad0a16fdf", "row_index": 457, "timestamp": "2018-04-16T11:54:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e8389dc-97cd-47e6-850d-e7cad0a16fdf", "eventTime": "2018-04-16T11:54:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.InvalidSubnetID.NotFound", "errorMessage": "The subnet ID 'subnet-7f84efeb' does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.12xlarge", "monitoring": {"enabled": false}, "subnetId": "subnet-7f84efeb", "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdc255375-4d24-4fa7-9a17-04ea9df8d100", "record_id": "flaws_cloudtrail:0000458:fdc255375-4d24-4fa7-9a17-04ea9df8d100", "row_index": 458, "timestamp": "2018-04-16T11:54:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdc255375-4d24-4fa7-9a17-04ea9df8d100", "eventTime": "2018-04-16T11:54:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.InvalidSubnetID.NotFound", "errorMessage": "The subnet ID 'subnet-7f84efeb' does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "subnetId": "subnet-7f84efeb", "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "753f587a-574d-42ab-887d-4bc149cf1711", "record_id": "flaws_cloudtrail:0000459:753f587a-574d-42ab-887d-4bc149cf1711", "row_index": 459, "timestamp": "2018-04-16T11:55:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1197, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "753f587a-574d-42ab-887d-4bc149cf1711", "eventTime": "2018-04-16T11:55:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73c9c47e-b10f-4a81-97ba-daaaf0d67dc8", "record_id": "flaws_cloudtrail:0000460:73c9c47e-b10f-4a81-97ba-daaaf0d67dc8", "row_index": 460, "timestamp": "2018-04-16T11:55:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1751, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73c9c47e-b10f-4a81-97ba-daaaf0d67dc8", "eventTime": "2018-04-16T11:55:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ke7u3Y2O0FsTZ2iocdt4wlCZj6rPmfbZ3vot0UcTbZ5IbOmt-GkCcHnwJXeiVVoFip1ZnsbAd7Dmv2UeOsaFSIemJmzmVoCtJ-l-Y8v7ZOFWL2FMb-0IWHdAYlaL-l424vQK19ERCLf2fXpnml9eaFkslc6xltLEGxC6ivKQ-UD9WKv-B9Ho4vu3PZSg3udf-VzeLkylR4KyLO9Hxffbv7IQ7_3DyhELYSUn72NU8OUcSyxc2a50q1-Zh0v5yPWw1JKkeaiCgNOHN5k5VDJ8pVHQCAF3Vvgq0g5RHyEbut7XBAN0_jUHeNKdnE6GUzAF0lzqLZsrw_DSXDvNFa_fhpmLo9HrGvUraGgdf_H-JWdPkZL1dDLjsAwyHQzeux0JwqjK1DhboMrcSxsG-YiuI0mUsdT-WXT_PIIzCpRdyfcaMMTLnSoCMqvawEgh9kr3L7_x6tX8EhQjDsrbXvIixXFIl3gIhb-ZvPddQd4JsmYU75UnI_iWNpTaYl_wpCUk78O7kB_uYEX_0wARdX8idtP-SPnvvB0j5RJQt3DT_Doji5k7L7yZwZOsJSLIb_BZASmehCdg0C4ZXXFtXA2owun3C941VLFqS6mLn0WdyHvU15V740Cu-VmLdgf-N8bVZtu_IzM_DDeqT3r5DuNP68R2OD9IHWr7eA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fa5eaf8-dfaf-438c-b0b0-2054c14f1764", "record_id": "flaws_cloudtrail:0000461:0fa5eaf8-dfaf-438c-b0b0-2054c14f1764", "row_index": 461, "timestamp": "2018-04-16T11:55:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1750, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fa5eaf8-dfaf-438c-b0b0-2054c14f1764", "eventTime": "2018-04-16T11:55:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ezxs_2Gm7_RSwXGic_BpM1QyFXZlRh9_eY6FqqQs8WCl0tln0SVcMBIAq4k3puFoQvPVsEZ1MXVp68Rp4zadGfFil2Czuavrt_WAoc5SSH4qqKAFf09CHoREunjWPSA8oNfCEroveFTGrEasAE4eI2KujGtMckZ4fQjdWgpOgmWFlYxDnhqykqYQx0LDNveUEskrIs5eX2bAOUF7ko87vxEPPyrnEcOSKdIse5NfWPXkkMQnSYXM4Ok-CZtsBNOcCBONjKzoO724qiO-hbi3GTDSZx-DuVQDpa1jYIF9XkKmi0ec5s1Nj7Wq-Bq-Qwai0Y7_qY4eCNQ_5uRS4DreU0ch56i7V5r6synWinW7rYqjveZr-OPhyY3yG0aOloKqxpS2dtlTSlo_hsp3UukYExxV9MFhtWV3nFl18BCvAUB26Yb4abF-e3yTiyeJ7DSuc8v2Njz5aTz9WFTpX7J15dmiLee2V9d0ShBMVdWrnmY2Emecx9Bc9Whep8toLDJSf4T5J1CfkNFFqmIaC3T16UaLGNZ7Ezp4iS1lTnryGxEFOcNM_xzEfKDvDe060tfcLQiUctWYUWsb-rGGZu2EZL3h7Ygp3nwOf-F9heTmoZSjOdXIlpNZG8C40Tu8GDWIlQZmdyHm9t_er9HvCHPPIQ_2jikkWNNCbA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1412b977-f9d8-48b2-b4d8-c92690a1", "record_id": "flaws_cloudtrail:0000462:1412b977-f9d8-48b2-b4d8-c92690a1", "row_index": 462, "timestamp": "2018-04-16T11:55:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1412b977-f9d8-48b2-b4d8-c92690a1", "eventTime": "2018-04-16T11:55:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LOJy1QSVR-zWnDpQgE5qfjSusggNnFq4lX3YDvcFqy9k_r8duDvbe4W_w7ueAvem1ET2T5zgt_iaQC2V4DLngr2rVBNeRjGjFjghuTiEPGSGPaU-zmdEtNuk6tqCnEYlCSnkAbYsjsy0LP0dib3vDn2oS-7_RqbvqHfY7MYOCAtADnO8J1JtoQolh6L2G4v6IA4hq9yln1E5AhbRzebFIWDuU25T2Z12jb6_DP1GOJJKB0ChjDdQi4QY6hRhi3bUFlWTkmBSEMELPiCP5jcPpllvaIost8UStD0InQWKp3A-qMBIqmikJtanh5Q4l3afzetkLoN2yb11THn41_bmKU67JLixfDAe2Li1qiQ4ssSs4OHDWEBw6XvJcpuFirnPz2VCqkPZBnfdm-TUZSSZXgb7y4IqfnLcU_E4ADAkir04AVovI90oNBkiHJ9uuhC0DTnie241dZAY5tm671Du2xJsQ673kKoMo_OMzyp5v8mvOaQYpKzhIx6jhYGTzioKFAyKTVuzobmUFtPol1VgSpSElfZzxBQGFnsP2qyoFXqI2SiZtKXKXMtQzWkjtemMzfEwhTboupLeNxbvud55W_NsMctJlMeegrxfZKxNCoVBQ9w3GYkV2U6LN8xJHiraiZ3yzwHzgjiW34gWBqVwbQ2ueej0VrTjYA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82e14c05-125e-4390-8329-e231df1a19e2", "record_id": "flaws_cloudtrail:0000463:82e14c05-125e-4390-8329-e231df1a19e2", "row_index": 463, "timestamp": "2018-04-16T11:55:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1748, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82e14c05-125e-4390-8329-e231df1a19e2", "eventTime": "2018-04-16T11:55:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GO-59Nfyg_bZGEfj_iKj88aF1Ye8PeLT3mq4Ezh3_6zGXt2C8GThm5_BFC4KyD62KdSbtti9Q1402PlIk0yeE0qbp3vN8nEOtBLWCnTYKw9tMXeJBoAAbl3BW-mGUTbYWeKbM2g9XqUvlF0iEu0iuUQ9hCfAMec-RIutZXf1trAoL3SrR0v4yCIR9Eg8RxNg4U0a9d4cdQrYd8cbGlDzKUx-yn1v8Z8uQBGFPTjNSfXEMb-fVfdRSv1BH9XVbFcKvvskdBrkO04DlyVix2xbAnWOH8SKnGdYdkIWbA1v4TX3TRXeEfTODbZNGP7VfE3AJekIHTqb5tn0R-bNYsME65s4hj8h19N9a7XASpeat_iyoU9RIoJYHZgErT6Eu1Mw3mPBtRjByTUjAsY2PTK4HZYEEPxqc__paiiuC7qBhHNtMFVltutsPWAq_Fy_tt5uqjohuYC0MbIO5-_H3kRM7nZQc-QXMB5mvpEDg3ehxfoA7tuyiHUJ8Smd7kS0pKC8fsYaWhG3p5l3QWWn3O7rn3-NHamM75SCvAvseKEER7WSId4Ze561Ad8f9elm7aS-PKRO11g4cxRfoZJ_E-6nmJZji_6BzxUVGFWCiQxhq4VuD7X7mp-axBShlUT2XLSEIFFOcKhiQPZVIrm49pt2LIoaWObFvi4LSQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbee0147-9ccc-436a-873c-22ea835f65f9", "record_id": "flaws_cloudtrail:0000464:cbee0147-9ccc-436a-873c-22ea835f65f9", "row_index": 464, "timestamp": "2018-04-16T11:55:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1748, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbee0147-9ccc-436a-873c-22ea835f65f9", "eventTime": "2018-04-16T11:55:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ghzIcugYriY0SdCqR6_zsrT5FvJLPZiwtI8JfZyaVi9AVoEo5K2ZXGVimaxGLihKD3wagSJ6nDcH8RQvWSWQ0g_eRiniPrOBWT4yL5Lsx-iZANq4DncFv2t89PEosEePUTUO5oza1tM5EJ7RQBzPOcNPOG2StU0VWLj21hfiz3Zfslp4nQmwSpUMFMWqLInkCLhW_7lOFV8OKK0FJc4GYe0tCF0lApClbzdAzHrwPL3q7-Jhit-0-ryDWMpIXmek7K1sG1zuSqNrpgrVHFMRjh5ErIKe19LAlUtJY2ZsxhdueTDwoIC4jWXXVwp6-decwbENzi35PdG9QfjnX3tKco0jvZyTsePV0Tl_orfBKJ7Hv-LzX6YJneGBKsu0bNe1VpDLDl8Ush-vRzV1yKCAT8GRyFNXrDeN9q8gQvGQTflUIogd0u_w1nmvy9EsXL0MLDjO09x_4qWlo2rH7orxlw_zKBV6pz6AQoOP7y_v7bOe-WjAKxkv6BE0QClBm8aOXyx2KUFqe3FNUnB6m4y2LfxRsxO1R5438lLQgfKk9R8geoJLfyI4lrnCzTmDOvTPEiukhELoXm-1lQLSKm924orBo4ZFfRTyAUolULTX5CgyBV7Wl8qgja7Nr7S-4DveQ0vEZ-v8UWi98aFI0lcXvOlKpcQHUe020Q", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.10xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "061ec6a0-91f2-4792-8ca5-850a560bb589", "record_id": "flaws_cloudtrail:0000465:061ec6a0-91f2-4792-8ca5-850a560bb589", "row_index": 465, "timestamp": "2018-04-16T11:55:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "061ec6a0-91f2-4792-8ca5-850a560bb589", "eventTime": "2018-04-16T11:55:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 4R8ZznEjhvWqLYyb4go2Oqk0axOhNkrj8MBlcXM9y6Qg07C2i_JlC5vnYygOs3iSEENr3ehtY6iSDDyWjWSXutIjc88dg7QQqzgzTLlKLQCOJjkvDPLg55gBwSTwlFrLVRMvPRdF7F2qfylWhpayRPKTe6yURV2mwu5Q5MqB95Q2U70i1qwbhSvYCU90xjr3wZMdAw4nI_ds75NGehzGmW9hV94eucWYaMjOxp4efO8aGNhHPJmTmy0lOg9DLij7Hq5698m_gE6B463GhF5yjQN8tMqQyQRnlp2ZsMPbNijj_nB4l-LElYeyiILgCrVRreFaf8dRME_qqYz131PPgiS7jLK2ZMgSEz1mnKCFqZFGzh8IRVf8PUW89dMw2_35DY8CqNa8yAxocRBOdlngNmXj4hevqt0nJCaT8U1wfCH8BO7e-KuSimmhloVFbYRGIWQRYOGak_LL4-0ktGTIE9C3y3oYTJ8vggUdsgv1qbHTXQze32ReOqb8FO8rAjuTWkMNJBVIOF4hPBZwJrYJ2nkXjCwf2Up_b6pU1izMLxVDPkik7tuxElquXeh1J3vOi-Btxlkt15etu2Yac73dJZ-99inMO5IpuqfVlafWbcm3tUjlK50InvEXyFqUr5uXTyvoS-_0lTQOQGFsbmfkLRseZT26WSuMcA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7dbdaf3-7fa6-489e-8a80-e38215b86f0f", "record_id": "flaws_cloudtrail:0000466:b7dbdaf3-7fa6-489e-8a80-e38215b86f0f", "row_index": 466, "timestamp": "2018-04-16T11:55:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7dbdaf3-7fa6-489e-8a80-e38215b86f0f", "eventTime": "2018-04-16T11:55:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ZPzPDQc5RT3aD_oJfbium35uU_L6IRWJPmmS1LjAhuVNsdAJkVHDKUxO7pQh0Ab4VLWKdFpO8d5WJkWTd-boykkXG7zIwpo9avOT2fzPFnpE5TlBS4ogBADJHn22Ro3SLExKri9YwjVHWm-8cart84yNrC8EAjr5BpCSZEP4ggG-auwhjxRObpF-ZhEKrJbDqBa9vA6Y5OAou6SxeY9vi9iPU_8xG-7HKVmg4Snh-uBeynPAwl1Q4Dy9Nvs1FshapbBOUvqWUU18Dxp_7_hzh03pHDbO1_vOoNU8yEAD-REckA_sAbP7yhrOdCuHQq37AHlzCIaIV0CJvEjlbC49JQktysW4pM_u8SoTJB73YuchYTMVcix0HaAKVgBign_6mopwagwfYQAQScD_AZAXPoBZjc1pMwOZvXKpbSjywBSReXzJu60RtSaZkMc0ygfPZTiy8AyXa7yetQHW-HDrI2uCdG73Di6Qjnvc4YQuESPEdxJNHOgmrbK5ZSfICgicSu8CNj14wRR3DiJ_0akbkF-ymYqzzsrdDl_svp2ygob4h2DlRFJMgUnMUD0XfPTohV_3jxrjPJfyt8zEJkzCi9NqvNu_P06ByACKagEdbSzeWVGRFUjrw-F-hi4aqSwHLt2c7uPPjqNkfn96XQpt2Ay9bKdHrO_pvg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ba70e88-771f-4278-98e8-cb17c6d66165", "record_id": "flaws_cloudtrail:0000467:4ba70e88-771f-4278-98e8-cb17c6d66165", "row_index": 467, "timestamp": "2018-04-16T11:55:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ba70e88-771f-4278-98e8-cb17c6d66165", "eventTime": "2018-04-16T11:55:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dwg2JkdlWQPv08Pgf5cSm_arhes1GT99sR4kyKSKj6ZwmIjZOaGPq1WFwTkRIBJAyGkVU0TBrOqcsLgPk7JcS3TXB9k6P1qh-Nusbq82WuFEbmSqj90-H3BpyLt2c_DsX4SYpxJpAYeu4z6qtch2MQ3dU1K3mo6JbqYPFmKfHQaiN1ZKS7Lx4_FY7PvCJLr6OLMV3yADTUxiFmxZP6Bx2P36VOSSRx1tIRpGg1wUmuPLiPBwh8K9NGLQl6ImdkpNAhTczIsmPxFcw-zpyfojvG3DAmGLkc4yr631gtnXWo-EDfZbTNWFCS22NWN_oP8F12ndscKdzv4VCcsa6lMeV72DjQ2symohPOonc31ZHAdd0qftsurE7Wmc9hShRarMxtacKmTXzYJqi1eTDUuus6rx-aUj0syH6P9w5DVbJi_utIDZ9wGToo3WQNUkmm3ct8AimyDwpBjdKiHEc-wAvBYvFm6a9myJNPV_W9Fy26s-89wYCziQ6-PDh-BKCbnWyrqGouqJl4LXBM6EP8gc_QJjenF20UrJ2t5PadJ52QvFKLZx1caPqejmsIF1DlAJTcBlnJSHsA0h4MiFyQBMpesMuaGB9T551sAOACumYMphfwie4XuGtNrs3V6Es-iZDakoLvdPaCgo-f8ysOweD4ZYlGypPMGe", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f19b043c-65d3-4503-9723-9852d127113", "record_id": "flaws_cloudtrail:0000468:f19b043c-65d3-4503-9723-9852d127113", "row_index": 468, "timestamp": "2018-04-16T11:55:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1748, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f19b043c-65d3-4503-9723-9852d127113", "eventTime": "2018-04-16T11:55:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: CeL1r6qVGvgqqxzFN-YYzc6E64kFnowguDZftrrfVq5Q9YzSQo18-1-hrcSSkyTF-aaMr3EaasV2xdAB7r28k7YFUDHUr3CRLbMsdth6bL2eEM_CUzi1r4TtlAUxDhcfKexLnBaapg6StOPRt9Xk3s1KxGSMoqNHNZK9UzQAJOz_bTwFnGuypkEwPKJujiA-ZWlbIkRCffauM7H-xjBJ6H2-I4TbcK_HZlqoxZ5GfcOzsddLmrtYklOYeq7127zq3oOMILKv0YpTYVWje5f9wNmTC8HhhtatnfYXqBPPWObzViZVXH2AN50hTgnyGoQymEhPLFheT8rNPHFTGJK6kPk5pj3IG4mqnojePEHHS6rUMxnDV2vUIjAW-t1vs-ph1X34JWzq0BKBdsfabyJLQytIXcwlGHoYrtHKSsi1X-uf3V-k1VU4P0F5KYzxzwc1gP_QUkTpAyu3GPzYLQ0lB6Edm-9B9YrRRf_Y_hdTxZ71YNzImIldWoZtsm2yvnrbHSEG-8ayvNIY8vrb5nDTm3MtxZvA0AZRPO9qY5r1rQTnyKbQ7dVH-ucGQk6uBFQWTw6UU3fkEOPmA1ao5TsfEDkRG_824RKS5Eti3mVqQOKJuCAw75Z44_PgwjZx7uI6Kp2s5zU67K7eqiqMsTU-TW5QMBe97TzOiQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c93202c-ce4e-4354-add8-49b8baeef5d9", "record_id": "flaws_cloudtrail:0000469:5c93202c-ce4e-4354-add8-49b8baeef5d9", "row_index": 469, "timestamp": "2018-04-16T11:55:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c93202c-ce4e-4354-add8-49b8baeef5d9", "eventTime": "2018-04-16T11:55:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: o9GV2VrN6YBMmx_YYQ21Cgrjo4c3rIuGyY31kBk8MHB5-QKgL6cwJJw7KdJD1vNF0BzSloOTWJKWNosNkgrbGs4TAdxam8SHX6rmx1cMdcCp_K_bGtKYiTwLW6TrLcRZM9GbmRW18KB5PCskQWlqUNZdsbJBALDUSA2Mq_Pb_LvW59kiaJ9AY8FeVNW_0Ct2hMq6owjqN3rXfSj5PNb2H5WmxqRErfJiNUq93_ZHk-QQsoPF6PHGZ482BIWVWVys7pzs2v8nouKsZqIfQoyGAgrIDoYiGu0sQVq-1PAGqp65BU2x9VURDATH_DzVYGXrmVrVGrNRWqtZn5hcQC1UhwYF0U_0qdnxlMdQU4J2VNQp4UG4R4QUhLL02b6FkHyDNOnblj1HG3kTH4bjB2CT1CfErX15YQ_SzFaGyEelc5zrEMXsRlV9xAraZBVXxfwZDc9nnKGHJ82vVA2Ousd19ZkKymZn_8GmKkA4tvE9hK-O7P4W6XVFdmmsv3gweAbf1WejgIJwR0pHpkxvM8I5sLUAfyUvLPE_zGHkgC52X5_WishhkFOAmETATV__iiKC38FUJ_jkoKNDwWAve8LNhnOYvwWgLwxlzUKEqv_APgR678jWZBVDxAZzvA7CbcdnnJRaARXx8-ofFGY5XV5mXc67r3uKoXel", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5ef22dd-3cf6-43ed-b6bb-fcf350939d5d", "record_id": "flaws_cloudtrail:0000470:f5ef22dd-3cf6-43ed-b6bb-fcf350939d5d", "row_index": 470, "timestamp": "2018-04-16T11:55:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5ef22dd-3cf6-43ed-b6bb-fcf350939d5d", "eventTime": "2018-04-16T11:55:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: iekCbaJ2z-8_1dBRcLsP8i5JJHWDWaohwlUVYW7bVg4mYNh_pXoyRUYLJG3cu3rF48YqvL_FKQVBw0cEH5xgHeUAVKjYadANRZYjMlq-WwezqzZSqBljZikydyBmc2Zv3Wo1-zbM_AoQjJLEvK3iYsBlV5qwYF0AKVyRJgcbpDmCIKvIcEzOUnfa5sezQqaBe4GOgbA3NHHu5l7O69Os5V0PGZ4JU3uCPBygyP2WA_dC60tb9RaRTzNXgje1fou6emhEMK9p-R3Tpu94ebct5V1h8PAsJ_9xRxRhDrSIMcBX0xHhtUJuFTZL1G4Ek77PbNj3lJt8i_EtS1MjUwqLHdQv2oX8hS-6dESpMwejgGPeYMLg8WNjHpqiGxEqUSUFsXxqZWdfEScL7v4z4ss8A8sM8V7VwJ_-WLc8Cpj7N24wFX7hp7OilxTNVX0_0OToE4YbELOibC3ydC9G2QzzaI9v-l7iOXBeAUnJxLxaAGBrwYdVMc2p47A9WMsmBwhf01K9VuQ1xLLFDbFCjjnnUrJBHrOCE4ECboQnq7nBIGT4UbT2y9pBuJ4iJO_d3ducw5wa355lZvHuW_arV3mwvMNI-99kLhVpIq1cssVN58qHI14KxgmdKSDxsqnKPwUUdRf-Cy1NJpps0jOdHY0Plw9RqSX46AbEbw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.12xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd630a34-9f52-4da3-b032-22f163526da8c", "record_id": "flaws_cloudtrail:0000471:bd630a34-9f52-4da3-b032-22f163526da8c", "row_index": 471, "timestamp": "2018-04-16T11:55:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1748, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd630a34-9f52-4da3-b032-22f163526da8c", "eventTime": "2018-04-16T11:55:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 4k0aMOIlhHSlOS0epHOIrY53Tzq0hprS1ocgJJseuTgs12d50ecwn0p9NMwrPaOLhFmtNvjfIOhWIarul84WVYamEuqcPFniaV5psTzJ4FPJCWz_VLBEgjfYt3oLeS_p5gPoEcR12a0mwB1kkvJY5mmXs3KB1YMKTth8VcDheC48jsGb_tsl8BLnet6odsVXH5bdIdSMFCKsVWKQYTKaVnvVNBcSOh4Cf8K-ECmEEOD9JjQ4PMH6DgbP89dLACk9SsMe5A6z-6Mk5sfv_n8Asvn-MKc0UrrR4L4QkBOo7hEbariEPcZkDXZgSHnFJGoEeibT2VpCBFkMFUU7-vgfoyS9qA8ZPgptb0ijFdhgmk-R-NamidDFri_nQCvInOfTxmt-LDKUnZgv27fzD9JDqKHI4CHmUwrApQZRzPXyX7BMi4hTM-tu4G6EGBYCJTvPuX5frpW7nmPUkd6v7LBwUOQvj-gi_8bmZ0PEmcvcfDo48IzRsJWPtfD4AAlHLYSTwawbxuzgPlZ4HSKWIoI2j-DmsxT1JnXa26-Bdszln-meLj8l_sM1kJ3c-44HENfYy-AlXS5xVJzGOwaTxBg-ShVoCsw7l5GG1NyXKucs_cx2k3r9xyKFOwHaQpj7301hkfQjpWahX2NUQo0sO27Egu2hKZw-FHi5", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.9xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2466e0c4-08cd-42c2-9021-7b73b4539e62", "record_id": "flaws_cloudtrail:0000472:2466e0c4-08cd-42c2-9021-7b73b4539e62", "row_index": 472, "timestamp": "2018-04-16T11:55:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2466e0c4-08cd-42c2-9021-7b73b4539e62", "eventTime": "2018-04-16T11:55:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 4BFjTd0nqT9X6ilSseZg_Myi5pZPCF-nPQXP6dVZ1SXJCW-kqt-vRmYAVmeWk54ANwn4U0QnI3_jy-82Qh30uvH33-AT_DgOG5P8jRlWzKJNTEPbRl5qGcYBYnOJ95JYZq0QJnp7Wtq4EY5K99icXTrnkysGs4ixoYPTBQDB-nwUphe1HJXp1OnuEZLv3eHpPocaTOdC2ci3XXLwF9vHBOL3oyyK1OAu8h7eJ2A3CalbnE4QBvXb2t4UJuvpPvJF3QIpky1kXu7eSthLoOO_JKQmS8e_bRKZcNQRmxuWMHK_IgLOzeE0hhWkow-ybjd4xw8yg4WCD3qqsOjjq7SYmKtx5vzfZtoV8OBDUBZZjx15NQqjlqW_3tz5o4op5eO-OWB_COHxJryKezXPS3sW8joU5brClRhAEQ4L-Qcznya2NObvhBnZHH46Oc5jwF8rc6ixjPIWSwwp2fjweSxRV8FdvmUzOom7cR8XU28IAlzxAlkWln-kk9C5BMjnaPbJWbLTaNDbtksuCNcl_p0op2_ra2v_-f4aPudvIBLnYpAfDuIo3P7M2oBLenlPF6yTl_t-psWmZs80SPooDFO4A-RhqyXEQM_2YTAGvV0GMvlfarcJuGvZkwk_Rj-YIRH66GEiTwOZPnLS3ZUgAL7rzYHHsRF6FKeB", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a05c1308-2f19-4ccc-8857-c767325e3ad1", "record_id": "flaws_cloudtrail:0000473:a05c1308-2f19-4ccc-8857-c767325e3ad1", "row_index": 473, "timestamp": "2018-04-16T11:55:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a05c1308-2f19-4ccc-8857-c767325e3ad1", "eventTime": "2018-04-16T11:55:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: CJeE4FVr487jbEhEbYWWIhR0whIU2EkDF1atAhG11F7aMzmeF1sSSobuensMCenoYMreAJPa6YNAqE661q-_vj0ZShFWuK8QP9zQrjVXK-sf7IhFokeebpVgwEE6MTNJu27jUhlOa7lFfSGIPScJPodgZNJbLhZmfKXQDjxm6T23LTZWakCaBqGhr2_9N_vX2uhWtYVUaBMY0dv5ePkIoD8ketn5jIQHjOnXm4VqilNEgNn_FfK2F_HD8H8xzZSmDkDnXcGiXlaBZqrRCo7lJ--Hn6zQwQ9YoyftwzSDzNpnLqZUxNGrg0Ll0cKKNVDPp5m9eFdlc7d30tc9zGxVkI-bn1oATJkGLWE0L0woiLod1qKqJJZ_gvtNuGZer1tjSu-HIdfzv2SPlEcItPVkBZKZK19d2ALV6fpF95EV3dREXDbsWZthc4uIHnfIZk06Yi5835zvJoe3uyjAT9TPNC2EUU1uc0avmiriYUldhD9WtXWr_nklomnRjYl-euT9AK_jHOwl7DeBJAWRkNCK7s7x6v5IHep9rBtmR1bcqLCXFW1G5F2lpFlleaeZ6VycF3Mf6rKFAGiW_GRegrMYqW5r5e2guFV11N_3-BlG-oAUYG5_jK6QU4GYuvzG64LCJ9zsMUeMULRCiWj-pTAfReHlx512lDnrHg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9f55e9a-8249-4889-80f3-2def506b8aa6", "record_id": "flaws_cloudtrail:0000474:b9f55e9a-8249-4889-80f3-2def506b8aa6", "row_index": 474, "timestamp": "2018-04-16T11:55:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9f55e9a-8249-4889-80f3-2def506b8aa6", "eventTime": "2018-04-16T11:55:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: bfm1__zoH4qhv2m2EQl9S8oxJOWymC5FYvY8dM9KZzRViOoqYjy43NG8WxXvO3BcrIT2lRUcJjYJfYB0D_7ymq4ArkHgGuDNbMvz39Rw0WZITRSam38zS9OUkvrmqJxzfmOJ6UNMQXh0_46AnXnFMQ6neF6NZ8yj8JTwcDd12vIwb-1P9OAI-ur_-RCTSsavQMUquJVg2u_xdUWyEjE0eW9nCZWHv2nUAQ9qx04PuyDGSZA_UlSFALVg4urzMzH1lC-JmoRVEnpU1R5hid0f9DmQY6cToAxsZcqseWunwTjko9fXEXXtidQxG06F1WyJ1RqFMQ0X28AbGka2DexXfOMhNVUL_EUaurYNQxInzIE5BOmzJoQz3YG6NCkVwzcjP4L9bDeemwBsMuoe_aEVuwl8TVz88RliwDcK6ybdTTsK1GM8BdDSbdBYwq_TF7-NDjRUZTZk8_u9VbySGILYyNQZ0ybkYA1VUn9_sLy6nJ98eCqDswlJTwOWFp7j6-FBCF281PtiT6-qr1C28IheVnhn72a1tVjD6bfjZZk1kDWP3tRRuI76Xn0bS1Ydysa4YPKBtw4UD-Aiqd0xsDEb9zsn4jzGqhfYpsPticJWKR79J5tQbVbeBlMXEGhrSB1U9luMRqd3BUgKCMFwcWHolkm2j_4QTcg5Pg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b48423cf-cb24-4c88-a84e-28d8cb3d6b39", "record_id": "flaws_cloudtrail:0000475:b48423cf-cb24-4c88-a84e-28d8cb3d6b39", "row_index": 475, "timestamp": "2018-04-16T11:55:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b48423cf-cb24-4c88-a84e-28d8cb3d6b39", "eventTime": "2018-04-16T11:55:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: OvncJTZPNMvqOz_fMonK_boQVBH1UKNK05y1Vy8xxP5_caUSWsRYMxDcXQl1Jy1Lr625WEJ44y-wzlFI1S4GKzm8a99GByf0Y-wT86nmEt-zEYCFzHkXKqC9botVXXHHjr08BlmaxVM3cT89o_vI3kbnahrR1ysBPDO2Z0b5DDfcfJU8-9OZHxbbopbaRKH1sAy0BfVw16auV8VMfqM_inaoUNi1uVOxZQjeW3K7cl7U411uajmDJwgxK7Hj5GClXACQLy6nULH33RFvUNRrM1kuTZpMUaxrpshllH5wtlrll902p8e-SjI9wd5r1-ySBoB5s5COjdQpZuyXYzussoo80uhl75X0GuHI2EC6kc1L9_OzJFIHPdOtr87vKOsR9y0jXSCogvJ6nwvHWr-vdLIrf9784uDT-ku5CpjyzZNycTxoOfzN_T9A0F3elw6KUQsk6p4spi_74NfwaAtEquNdjWpML26fOI93lLeNYzeTI2AZ6-_GDupDK1AjqBgiFwieL-Othlx8HMC-NG3B39OTvOhsBm_YSWfWgDXY_jWaSX3OMELiVOYTbBLOgHxPqVoad5jLd1ZiCLygiPw73S1Odjgfmzm8_BWLme6boYQpt4MKJFHZuy6WktRPkUnR-DrJI0rDNH2qSnPZj6glBp9kBYS1RPmJ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7afed617-4d0d-4590-b91d-787e67e776d5", "record_id": "flaws_cloudtrail:0000476:7afed617-4d0d-4590-b91d-787e67e776d5", "row_index": 476, "timestamp": "2018-04-16T11:55:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7afed617-4d0d-4590-b91d-787e67e776d5", "eventTime": "2018-04-16T11:55:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 5H_jiOdIQYtGBy0Iw6Qy509z5sGT8aIlNguDhiMMCt-Q9r9Vs_fBGpFxEZfhATkAA4Canzq9oWMc696JcqV_17soXZak1a42aK-gXtddMZZ46EPEtCJWleUZDRxASzCHz11JPraSigd2koa1J1aj83sQoXCfj8or7LVmkX4b3RBrnxJV0tk8Bp6MdkACk-tWn9mJMwcC_522KjI9zUQXsTRDhqR1CwsgmK-a8TUxm42BAjDQ3mGYilNrK35MulDJzxn6VJdM5widfCxI7QDPhObq6Dy2MBIcey1y-WqskP3_kXkAkpyN-ndAqSvl-Iz7C0sQiG4UJKqHuhvlyr452Minqd8U0lOGjQpNcJfTu4tMwheHB53M_yk1IochdhXW7br3tgq5Q4Ri5uh7_NE6T4662iemi4hgJzZfbuyBa8j09Ln-3bq-LrmdMpfnSmqYTTcHYHJKT7lJgO5v4E2jh-XUq9377ri88e50islHHceG4geuMHYbTEka1AiS7xAZNMJyhvrgeKeLlZo_8jEWDulcY6lX1c6fLejCHzSrVw4NA0KANrPPZq83x0ElTlOmzMj5VEEKYZHZmRhThzv_dEz4_-dKFzaTVCZ_F_MkJZla44GNa5PbO_GM9RUDUBsyDwgwhXxgnHG5oY5opyQOWA4lO_lcHHB5", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08ecc47c-6463-4dc3-b31b-54caf5819534", "record_id": "flaws_cloudtrail:0000477:08ecc47c-6463-4dc3-b31b-54caf5819534", "row_index": 477, "timestamp": "2018-04-16T11:55:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08ecc47c-6463-4dc3-b31b-54caf5819534", "eventTime": "2018-04-16T11:55:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GB_uJLIe2AC-ytsgQz7yGIYhXFBHzLe70CGarABAe_BMqONqHQWXHLfU_kqJTSTVbq7olwfl9drgJZTS1Bpd4meD_dc6Ci40fpeeF4H9jvatNkab3RqwWHrkuHxoyzytEH2ojLpT_0i-vGgqYR3tKYXAnMrw1oBz-k-ojWyEVwtadlZQxYLh8RpRgqyAOnDf6c19nC190sG419JajNkFHKg3r3NNPU-0zSY160doyrkbeXNkYBXyrwjOGQNSUObiV2oS59vcbB-2XyTIZSaiAY4mR5tOHPDT8MCnuH0WkLnCenlLIYIl-Tlpnp3oyFTouj59t3ktjBiWPlG8SySbXMwhstMZP_mTYBf3qEqfcfsCr3emzLvL5EaiINvHO6uJDr5QBzYPht_TYdAsj--tQfYYEnSFSQuAdGnQwgb-3cYw6ZTeBPmlg_1DL-s16RoJ18CxeO14i0evdSY4DOzZvz9UIlvmxHSFUVh6Nr3GR8tIzZgRPw3rNvaOIHM4kEbXNh5O0gDZaWms3f1HMvTH45sI_Azdrhufn1VU3NzHfCtoMQObUMjCh0f2sUdWFJeeCwsatk3Hk9veqWu2MUTavaqtpB9itVIJJMrgf1i9dOKi6X9ewVaci1gLcvBGSsnkCFa_orI_1XL2ji_SjoHJzqeLHCRKiUlI", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "781a4016-e404-4aa3-86e1-8834b6041acb", "record_id": "flaws_cloudtrail:0000478:781a4016-e404-4aa3-86e1-8834b6041acb", "row_index": 478, "timestamp": "2018-04-16T11:55:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "781a4016-e404-4aa3-86e1-8834b6041acb", "eventTime": "2018-04-16T11:55:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: IQzs0z-fWn-Zfl5x14iwil8usUnTj896IMYj78fUClEi899bYZj8mBjCxCvHx6yzsaUwLWlC3b_lwEJ107W_U1GL2my0eRnrNmNxK44qVUy3yfrHXHx8taUsM6Qs0DUeMqVtpEAlBop9SFVO9i0LokW8w6GGV1BM5auuu34BhDiMb3pg-sz_3MG2o9YdQOaDou8-2KRWx89vIdHO_0-imH-Bx-0Bng38tWCnRiQk4oL8Qi47P4_aryIeo72z3o9XqGnicwsh6R-k_KGfWUHmCgZ38ppyUDi1BglthcwihdiDad8VjGxQ37YsJFE4bXln4z9p0dSUUmsHokCMvoRXGZeBA9hckE-CLJ2xsiA15ODlmLHEDXmjPpxMDbqld60ZGDfTHT7ocy0M-MKjMYJIDSD4AywxWVNPl89bnAKowCaIEZFaVO4Xet_X8zEYNgbjZUV0vRhytGwo7sBg33hFx7MYBes1yTrAUvQQzXrFybTRbYjkEDoVebg63AP9z75Pf_a95XNno15xqd9GqOU71o4d5u7OIpGmikPPcgy0sDTr62ZKAVAT0t--9k5HRzNlIkdPxfy9W8hlDHHYE8v5WVBogyMMlDc1_UpDUyum6InFxFHfSpTJwy74CVahAzzL1Ruq4mGN2E_54DbQQZBsQOODaorNgXEY", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38467b23-eb3e-4ac7-9a29-01811a466", "record_id": "flaws_cloudtrail:0000479:38467b23-eb3e-4ac7-9a29-01811a466", "row_index": 479, "timestamp": "2018-04-16T11:55:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38467b23-eb3e-4ac7-9a29-01811a466", "eventTime": "2018-04-16T11:55:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: VcAb_rV6yjt9yuwunA-G2z2Tiyy8lK2_WdpRBXe1ju4vYwp0lWmgPneEDVbUYoNIR_sD9qbNOxMGWGw7D7Jw7pOEc3ZuW_lMXqQ4_WnejROpG3cUGDGFLiyY2EcSZjw9_MJUnP0QALWE6A77m9saPyXUxFay7tU4jnijaoqQf8OKMi9-QFOz9-ipT9KnnM3v2TvrKCEbzyuykyLisN8Q8Pn132-5TndgqkqbaZ6-_kqGcGXbmDUrH43VONR0wbbJes0IT-4pliFHN28cqbD6858PODZ_C8RLl2HgFq8o0jsImlzJn-JsafcUNaRdSlfVlmNEpks9amoA5yU-Ax6btlvY5jk_OGTyz-OtJgf4Msuiym1uOiGKIW5svm3CX0wyMjhXm2Ryo0HSHUZsn21mScMxcedAER7ClWWPiWClK0YLG1acU70vvJa-rCCeKRY4hRC1qCc3mVvonvGKyUZ8QWSl2mAijX4vRZgGodmB25TFivfWPAsQZOwkqfZTRMIkalkHoYk2TxvMpXqBv2a35vfM3ujzzbFOzc8WAi6rOBlOslKAPvezOMNxPWutzTwBXsoHSDbf74CkfcuINy-lQnc-SumxgGh7jIdaTaJrRG_tumBz_NuHznYx9THBxICnjJKtNapJsHLhsG_3dspLkhjCOLlet4mG", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24daded8-5188-473a-a597-e87cba26cf73", "record_id": "flaws_cloudtrail:0000480:24daded8-5188-473a-a597-e87cba26cf73", "row_index": 480, "timestamp": "2018-04-16T11:55:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24daded8-5188-473a-a597-e87cba26cf73", "eventTime": "2018-04-16T11:55:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: UiPTh1ySK5EMkc_zZAa93r-34XmOdnK7O4kCf1caYFxwVxnYGPgmx_0vR9wwvPGvlO_r6lufxFUsABd1GtOxHPc98iYq_C88_NswDdMvLUERQ0uQ-6DI7iDvXHTTupstKAsPO_W8tOaG2SuFhFZpEb_9kDHh18UOBSQO9ZyxDpTao1slsiaFIlwIo31lah5ZDfu51Ps4UJrTgJLUO4qk86m6PJB3Lcme_OqiXGax_EWhGJsCSP7iHA9P9GPYyls42aXuefX_RtQxy9XvM8yPEf__8TmLMlk06OyNGdMc6bXW72Pjs89GO8twRXqTlHhUB9fHHt-8VtlAnD-7LqgyJlFH3enUkewKnr_x82dPSAASiniSSpqKSE5ykYzFIHCEwCXt4oqnCR4o1eLPte8Y-g63feSP1E5TRia6caXGLqSEvrQsos4g7z5vS40cBY8h6KH1F1TM3cPhCin-Rv8RVTT2JUWMKbzmeDjJKssSzkVu4u1l2ugKLV8FzyG0QaQvzuwtc5rd-WBxMTOCII6XyTq2zpGd40k-g_hTFyJedkWrikfD_IZ4dH0DDhbPcfO1kHvwEluaPYaT-ovtj0TWm_eZe9qsGUmqq1h2Dq7djE9Ky9jh2XJNaeW5DIgDR8AFsRgHKJiFll2VKrl5Z5McnwzzQb_JjzPt", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6801b3d2-2b97-4581-b39d-bc3bbbcd2832", "record_id": "flaws_cloudtrail:0000481:6801b3d2-2b97-4581-b39d-bc3bbbcd2832", "row_index": 481, "timestamp": "2018-04-16T11:55:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6801b3d2-2b97-4581-b39d-bc3bbbcd2832", "eventTime": "2018-04-16T11:55:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: qdTx97aRBIrTpbxW1uDSyPrdOlh5AHhVMHrKJc7AmVp3iqVexEIU-PV5UpOmKUYHQ7qhG7jF-06pFDqdVU-E3nfMFgcp6aZF0MCQdiqgI4wNQLcEV--dPGqgZzUrAVbHF7vJGwcQ2Xjg_yRj4z6XGyocD0fdfOXIy1GGhnfna5SPaazbMHPDLOmdDtIyhOgoSyuYDb-4qGLV_1nXjo95LsmKXOcEisGGr1Yq-3E2od1cKSPs6eUOmeSjFS3VjBRnSFHBO519tcKjr0szmoT_-ysxMZgZHVJnYEDNu-jc2DP00Kwi3B1-PjQjZw-K02_3jry7pti2a9TLe4dkXtbYUqmVV8yNEtpZJ9q2oM2ZIMM0gAsFzRqYpyJd1ZbJZUpi0prAq15w9q1idnfY4ycdmY-0rGjI_pSBBroHSSLMjKvaJhGf1lPw5ndj_vpZVHsNsBRh0CGqmZ5iUMU2g_IJ_1GjJxdxRgrfuaXBwA4thfV9c9MFeoLOljDzCCm42O2iWuakCGPklh55ioj6pDqT8r_1qwEBWINWmnYXrNbmq6P17hWS72yepdawCss91bdNCqRnvc0Z3SaZYbc0c6vmcUpnay5QrE_dz6rl1HtdpETcEW9f1cVUI4e28yG6t_nzt2CWXzTfZbY06IfGY8zLIIh_PnW1McIZ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cb9d2bf-f002-4eff-9377-205623d35a17", "record_id": "flaws_cloudtrail:0000482:3cb9d2bf-f002-4eff-9377-205623d35a17", "row_index": 482, "timestamp": "2018-04-16T11:55:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1740, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cb9d2bf-f002-4eff-9377-205623d35a17", "eventTime": "2018-04-16T11:55:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: h6DEWJSZGMYEmnIV19Prq0hJxj47kPhBbuPYM8YGvpuaIYgq6WAYbNlsmYQ4EWSL59YlIV2Sr8dcfETZBCxWTK7jDaEWG0LWXPFdAPO33v18bhoxqMS34m_7R2O49vlse7m_tC-XnJ1Kj0XUPSSSPNzMwQE7ehuD8M3P6glGO1pv-Vd1bDg6HcNyAcB0rV9mbtu_kG3IOOAvv7qbbZ2JFbME76sz_3uEiDF1oR8Av21dYD-t9Dl5hSlleyUn2cX6s0WwfiFIU_QoIZECwkBQldzu0-8udC1PqpOr4C9hSx0iDAE4oT7VPehsmzBhesBp2hlxeXmnp9ERyzxkYyCzDgE6VeMv4hew_1weoeJXUF61YOkaTuTLWn5rfiiblN-G-TbGtTuox1_z1xqqhWhKHw_yXJ38IQoylyG7LRbqVV2aDVx3xrzJiCVlL_bZEpfA3U6a7m_HraGT0rGvod2Z6lad7Fgs1S4octnX_JYTSKQGRA2Jbj5HX1d4ksXxhxYkcdcb149eGOsWetof-kUSeCFalqCTYvdrnkbENpB4cYPcsRfBNUrR9TOxKJfKuVaNX0mDtEd2RAnWR6_4I1n1Uli8Iw12AgNIv6G6cRG7nBXV3nT3bQHQJOAxqIbggZMH58BUD4tBV3HHJ8Z_ucvkgxcd2zASJEk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7f8d612-b4a3-436c-b412-893385ec0", "record_id": "flaws_cloudtrail:0000483:d7f8d612-b4a3-436c-b412-893385ec0", "row_index": 483, "timestamp": "2018-04-16T11:55:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1742, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7f8d612-b4a3-436c-b412-893385ec0", "eventTime": "2018-04-16T11:55:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 3-Cw_3c4-hM2DJYLZ34bWjuzY-B1Ej9KAqmMpWaAb4CFvxZ7e8gX__nJ_ZhSG40cYTXsFSMjwJTkDja2mZcqoVEb84g4ioAy2loA2_I7So7vN-fB3npJLzdGyHk87kFrgr12ZJXNK98aNY9wgj0xDrAy1gMVnUUv-gIZTOQnBMyEvJqkYB63sqj39z41RD6N0_KYtQOlvuY5RNZkHAP1tE9GHOkjYrij5bJTyt9_XGBatqFnMZI2j7xMQhjtbNOtIjRjdi0hmAgK_j2kTjim3kRaZMaHsdeLbIkCHLdKOew4bykjVPlpRAQmCy9_gmJgizgEY5kIJYhfEUFuie59gv_tYF9mkchnBAl4O61CfnkbbUBIP9LwIMFpXPe9Mvh7OiWCJkbJIfByGAU7RvjQDe0-xCx_0CpfErndIV3tpXGVPYOvsXWTWi-r9UGAwxxH6pGhlNkTbveHZL8R2FXVd9pxFN_-lwuklCF4Als_0IdAestjelPNo5_nUgbfuMO6eaHwrSs8RKUXJ-YhsK0yHH5V5CYGf3aKr7lYCfdBlBlQXexN3C2CFQYuJn23e36_bg9mbap8-i9yCQMROjph77g20S4A1ymWMyUsm8nCqbxjAmA9toHiUNWY4rFTsbqeRR3FOMMdMseQ6KP1fwHTvcH9EWP0b-Q", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7212a8e-6e33-4d05-97ed-55b4f1cb9774", "record_id": "flaws_cloudtrail:0000484:c7212a8e-6e33-4d05-97ed-55b4f1cb9774", "row_index": 484, "timestamp": "2018-04-16T11:55:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7212a8e-6e33-4d05-97ed-55b4f1cb9774", "eventTime": "2018-04-16T11:55:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 5M4cyXza09URJn_qLGzn_Y1LFsKiT47YYnwnM9E-_J5a3E82jNmnH2KGlaIb1G7HNWUGcI60D2lSu6ci69gm8LMBlK1bmICg7GHflLD7YRv0cO_7gWvfbqfDPn2sAEHrWwGtdKOoFPmxPvqhwZMer7K9J3AmO9YwwjEd4OfW41OZBF0KmeAgIMbCuXNWZsrtsr2orWRyMzwC6ix_VAa4S03UkpX0m-YwIfjF2D3Psw8VOIlK7aWRnK5BzNJ45LSdiABhuaFYHId6_lJDMYbxPmuQQZA28FhGDVIuDDuYelidXn0hrHkPQzocCu8RXlhYuIVx0vv1xCcqIlpHTPjPUciKC8gnN2cANN2fN3Ov2Z4dIkxewmGcLkLeRzEmVERHtLOa0gEY5gLD1sqRNyEBLswsW4sK25okpaitQfG7JssWg971AqO9_jFhMbwjbRHgnlRunB0rdXe1dhdvOIJLNUiHLDUZLCjZleMf56HNUeBxfM7TlRTYEWzBX0t9VmYjvftwGwVbIS6O0xq78FJ0VTp30hcd8Of3fJ-GjCTapdzPYN887DaoEmYe9lehB_MN0rcWDoT1wNFQLhrI05lDbnxs0isFDhwxEWZw_yFA2_ceD4d0myxxUQzjuS7U65uVKWRI0abZbE5aS_UYFbXytYx9nOLluA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e470164fb-b772-45aa-b266-70d1eb25f6d8", "record_id": "flaws_cloudtrail:0000485:e470164fb-b772-45aa-b266-70d1eb25f6d8", "row_index": 485, "timestamp": "2018-04-16T11:55:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1742, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e470164fb-b772-45aa-b266-70d1eb25f6d8", "eventTime": "2018-04-16T11:55:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 0QPmwt2p1Invnn-NYUn6DuSycU2lRQXJGF8QUTtgHhonV5LK4CA5tkv5c_SgOsO3EI2fmmgppOlMHcalCH9-lJuzOz1gONA8hYcPRKDUQsdgp3_i8RNVn761icmqo7XyEz_svXVJLrbhaltI62BOy10h7lHNU6F9JY5zxI-lNkS8Q8xfOiEb5E3Hu3xXdZcRncnvjP6whmVQF55Pz3bm0Hv5MgKUxITSmfMpP1KgoQCEbeYj8l_FumMzQiPI8RuoI9oRRqNZeclrQ0ZdtzmuaAokC6vYLPxylU9AlmRMu9JQ_mILo74oau_fHG79poG_UOe2dAxGxQONQMpj91nm9Pkw3C9OKS2Qu1tZQkTBQPPXOiQYxY4fDtLvxxON1iImdfH32p8w-BFmcrCxMiSS-UU0118jUX45RY_-HEwBjAU5jWOYjNWc2Lr5WLZHkxQcoGahGAM4UeiK7XZrs40d4qMO8LEqf6c5CrUt4Bg_HMxZ7FvtpeEsDpTYhcKuYbCuQQ8vTWAF7ciaPZIKP-1kVkStrfgUHWIvmhDP0CZ-SJaRasXLJtzHruHs3ghtZ1rj2C-0fjt5EwT8lRUAW6rkcUye8WWjIcxnVqUeQ0msuAe1vC8bpXPCanPoelXRiDVNRVhKmDO55Yv8pm5IM9AJ1BB9Kf2uxI8", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10bbb055-5e71-48a1-ad99-97003b1df45", "record_id": "flaws_cloudtrail:0000486:10bbb055-5e71-48a1-ad99-97003b1df45", "row_index": 486, "timestamp": "2018-04-16T11:55:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1743, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10bbb055-5e71-48a1-ad99-97003b1df45", "eventTime": "2018-04-16T11:55:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: PJpVuUtpniIANwWaMUAY8PG-8rP5oRDXn5qPB-NyPalhJj93yCgNuF4aFd4vDQEZu4V6HW1YGAueX9Yt99wcHu1iw5Xm0Fo0tSh6lUjUH3nKiaIt7JA3CcOFsjEb96VB7tCLllScZ4ZuAhrPHG8iANCPjQQIsAKSyzWc9It1ajfBghcQJ6V2TtZv40WPKk96bZRjaowne-9hFHVtQK20r0l7BRzFBPr25_zVgxMXriZNvzQjTcd9X_PzwRSmA9dGu1j67s75OBQNmooU0dEJw6sE-M56U6DObfkx6033i_nVgaKtaeXjorut4RLc1hG2qX9OJ0wGddUzEIQ4tg5BJ8Ux6Cf38lm6QNIPc7qXZNc70XAD85vYcvscNkoSwBundfImPuylSfUdC2Zl2dYR6rVdYWepgHAKmG0hso8vjzgn1PYIxM_sjUryG16j9rWuZwygH9SAk1lJBB7JtpixOF3wevyKBpvv3WW7ragO3tquURdzi5R09n2g6XOLqz4ERbXHnsxiHzimQYIpOXO7mJ7v4U3FL_u97VPaVQtG6JIAkVg_Sd9MCOC9g5btRg5xSqvWc9llYL7-iub_LOJ8jPsgg5vaSxH4p5a_AYHbiGZ72ygJtV37W1ORXZ5P7WSu7OliNw2dg1Pqa63Wl2CHEAND702WbOY", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7447b62-ad67-4e1f-bd66-730d3ec815f1", "record_id": "flaws_cloudtrail:0000487:a7447b62-ad67-4e1f-bd66-730d3ec815f1", "row_index": 487, "timestamp": "2018-04-16T11:55:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7447b62-ad67-4e1f-bd66-730d3ec815f1", "eventTime": "2018-04-16T11:55:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 2jWu-ght4BAiFuE2Zp8x5P0yUd8iTNoYMYFjFpCTNAD4YrgKH184PAi6iDTPJ9hFy1JrKRrc9OVQEEd5WtujuWUe-AGDuZdax1Dz4bshHG7t7dniVbal0RnF3J8XOA_cSeTMwnqLlCOVe7PI9rZFajXpTcrtuRG3tVMteqSEYqN0EWWW-8Nkm97XxNs9k1WUKNrckE88KI6eY-A6q57y8VvEE-wn61kT20hcoNPhQgZNBxzPkG2GGpG59tY9P0Eqx0oNUIlBqCxKrBz-3u8nBRdhw3JvhwtM1e80LSKmZoxMG1R8okI6kVBeCbW4c4eeWuHfdFin1kC2lxqhoV4RW9ccDFb6FFn5vtc8qN0VX3DrUYsDykjdEyoPjPDictrf7PuKnrJOE2BNHIjrfBo8oIDlXOFOyPn9cHHii8CGVY7zv3bfo14kN5M6fWBpHE02y4p4DXyaGn_y5ZTtv_bE8s9Qr9BWQeOUAuNg4nBXpRoL-jDdISrcBmXj8pP-vOGMgJYtFpMFoIpQpDrDhwZ1tCjRHBhmLha_fUm2z4G-h2wxYpbus01lypCAQwcgeCNSLv38xwz48zit3mjVIRuyw7ULpi_8i-qc5DsQCTsA-bOgjTSsxI4XHJIjWoFkVTrAtTkTzm27YDROGNjIYyAElqJ9AaOxyRk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f94fe89-331d-4f82-9924-585d9ed63c6e", "record_id": "flaws_cloudtrail:0000488:8f94fe89-331d-4f82-9924-585d9ed63c6e", "row_index": 488, "timestamp": "2018-04-16T11:55:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1743, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f94fe89-331d-4f82-9924-585d9ed63c6e", "eventTime": "2018-04-16T11:55:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: uE3RNTOPS20uomxU2CdMkN8cZ_TqWXbvnzGjQ40zDh7QK0rP8I-YStDTaI1k6rXNnemzdwT5wSyGZL0z2rRMGlW-BJIrU7P-xqt2dm9z-LDBLRGgG30l9CNjSLhyV3PShsxJChAVtOTM7EnUV6uu20OBhh_ZSHlzDqPIPvCW5_FcKxX_yZ7XSoE-APsA0KbKPft0woL2HIDTSbtJ9cjf7X5EuV-sPNogxTOg9hmon7b_woWc9eDVxJ3rW1oFtxBp73D9p-tsUokXW8hIRV2I51ozgRgJDzscrQIRHUb0Jdlv2q13S91_kFKtWi4bz7eDtMleP3UXtJfQsDFfelsQo9HKkjJotNU1JrF3JqyxfpbiSSaTVhdGEbvhaFdiZbUDtlAqeERAv0xg1poKbBt0nYeT87QvIP3a-_dc1lnMGh3guNH6SvJX3gXMxKj5Rw6Vm979HYX8jKhmYf2l5uofTyBnDHQUVXCXG0cM-pJ4urClngDWaIoEM4n7Xo8aBMEPK5f9r-XQF2rKs_gULtvz7vgXhkdtDXHIZocHPbUxrpRPt1YVxpLqe04mPQAYs5jCvyN3Uszu8M4EP1pL5wYHj44Xpfuvhku4P2C4T2V3WYHGALDVo199R7DAN2svGJEyAbdOt_FXOikPxnlWfOmT1x40RhAQnho", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05d273ee-6474-4425-90bf-b423241b23bc", "record_id": "flaws_cloudtrail:0000489:05d273ee-6474-4425-90bf-b423241b23bc", "row_index": 489, "timestamp": "2018-04-16T11:55:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05d273ee-6474-4425-90bf-b423241b23bc", "eventTime": "2018-04-16T11:55:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: goc2Vadme1wK7Pu7ryGI1P3Qu_Utwp48_-oFa2r8KbynrWi5J_Wv89dXjnHY3Oue-B-9LfXCxQjvGuo7ZIqlkGPtoZhA3I3g8rAZEisDsG0hShSvZjKncW-NrH8MUuildeypKrfxArBBpM5-6N5nzYkJkE78U4yqfKqke5LLGPXiSSc3hgj3jKDZhoUrEC8yJs_irD2ia_If2x0owoeoCx6cjAlAXf0x8miRFltI7q901q2FqEEZx3wSgKF6gccmpJltkeBPkEUgTPw621G-OM20Smc_fOgoA-wCqoqP4gqyCoVcAXCTWps64oItmwnx624V_naaXaCBueeZRjANTqxvNS7K_lJph17FS4NA67W1dYVuE3-VLstarbCFby3CBZ-kw2jKe-gLI7gVKU42OIvZYMmv5raa3ThZKo23d4yhny0AjTfAc0IOQGgbDrqJSjxEM4VFm9AhffNc_-jI8al_vO5D-FlRlHkwKWUQZ9nJ4gne8z7H33_a_NpOcJ4suZDOX4WwwmS2ESRAmlew6bzE8SRBFD2FeUfF3w16KJLRWL_ofW6CHURDFqxz3UytYtNQ4dgJxJa_qWAG-aFmw30Sn0AHXxLbRGdGON79NAVIyAVpveGu9Rcpw-_IaVF9sMSikJRlwAiaiQYz3D0JfARjjYkz2vQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d93a301-39b2-4e39-8fe4-7b46706b3b42", "record_id": "flaws_cloudtrail:0000490:0d93a301-39b2-4e39-8fe4-7b46706b3b42", "row_index": 490, "timestamp": "2018-04-16T11:55:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d93a301-39b2-4e39-8fe4-7b46706b3b42", "eventTime": "2018-04-16T11:55:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: sEmU4ys-X6R3e74BRxx447kaTB1gYQsOfFXKBSd4--u5VRA3yvF8UcTaaaRIqwgbbwr7YfL8e5OdOoZAS6cnkMARbNNy1i2gYQ2SjDJysje0L_MRCBs7xD9gRniI2oQ2AoNn7PxC9qlWSFBKwjm9LId3OsC0PvbGZVjQHAZOfl72CEqG5rXgmcLxd1IWml8SKQJQNTW9ocrdiah4Uofwf_4TCEPFN85DYn8_SuqCZ6gLqERjvjZrnrYb603LP0HZAfddwoiOjyI_DOGfw4jZ39WMPtmwWQMdHsTC1kpK4w9H1xiK21IJ0D0C7LEPU9vtdpcUTtAL2ztqCGm-Qufw7-sgPNhWFJVFMOsQP3KMDyIYcQJ4EpELcEmSgoCYAYHKNwfcDel1gmIxtLeAypPbP0LWAUMNFtiOGxC7Ey_ioX6uYwCVWKlanDshKOSHtYWOtpJuaeAcwj_sd0TEY9m2Oh-9VwvfHYGUTZ7kfdo9eXzCg7m1870xVChf7ZoitFe4B-OjR361oovZRoLsBWCDNl5ZhitHpxVUcykoVuxe3MI6w9u7fyZEI4OShtzFYvPAyfj8o4muh7wnMHizLj3DnP6S0Yoe9tOUvveO9G8Qx1y0Qz_fb11OKA7N9rUkf5v4tsRgvUqAHfvvf3DcFIEB_qd3lXplBvE", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "325b63cd-9a0e-412a-aad1-82767aac69", "record_id": "flaws_cloudtrail:0000491:325b63cd-9a0e-412a-aad1-82767aac69", "row_index": 491, "timestamp": "2018-04-16T11:55:28Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "325b63cd-9a0e-412a-aad1-82767aac69", "eventTime": "2018-04-16T11:55:28Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountAuthorizationDetails on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0660a081-cfb0-4bb4-85b5-dd65aa9fe53f", "record_id": "flaws_cloudtrail:0000492:0660a081-cfb0-4bb4-85b5-dd65aa9fe53f", "row_index": 492, "timestamp": "2018-04-16T11:55:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1750, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0660a081-cfb0-4bb4-85b5-dd65aa9fe53f", "eventTime": "2018-04-16T11:55:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: QY2hp6xrlNaI23gAbARqlJ_48f-72SNW9tnOx42X9tp3aTlhhrpyEi7-wAlg9Qwhh6YVksGAnuuUXWG7D3pMDqjWe7gvZLtVGw6_NdTkBF_MDYY00SJJRDzHW_qVIssm4as14KNQd3J6GuwVwRGA_F90S_XbmCQpHYWVQf0_Q1C0uH50kQKpD9YKOo6MKyIHJD9BN_-UQR3Y3jSEn6xrTHjXbQlUY1oEZwuA43Y3JgqEXAo2FtWBS1p9ueiNO-zhqiKuyBmF0hhOrsaltKHu-ZlylFZZjGizMb_hnGjaWY_bfv8DBshccviZ64Nxr9doxa2X6fXVAzzB4G7tvCVOK38F5xqUVziOtETZ3htML_i6nP1e8a-gFHxR-FXz65HwEpuL0JcskYYO93s93QR8GHDr81rSVDJvd04pF_WTpUs5Cs7ynyYXRcRVjV7KknHoaJwjJJpS2Za76A_gjDjqD-DHu1alF0GooiB5X2z98FFAexom-7dlCEWdIkeVtRvTKv5n7992OpAUN6h5f4sFk1wMtNJH_GUz8pb2AqUKtAI-DqYxPcyfOazuWRQMJ58r6fowgX1a7sVSkwY8C322qafWAMUuJ49URu5jVEQ3MDqV_m-nY3PDsl_39pddUrwFpyfDSIHF_sAGxsmxjTR33-t-AKEpXYIl_g", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d473e131-7dbd-4dea-9493-621d4e3b88f6", "record_id": "flaws_cloudtrail:0000493:d473e131-7dbd-4dea-9493-621d4e3b88f6", "row_index": 493, "timestamp": "2018-04-16T11:55:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d473e131-7dbd-4dea-9493-621d4e3b88f6", "eventTime": "2018-04-16T11:55:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "861278c-b28f-45a5-8e5f-03601b26f483", "record_id": "flaws_cloudtrail:0000494:861278c-b28f-45a5-8e5f-03601b26f483", "row_index": 494, "timestamp": "2018-04-16T11:55:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "861278c-b28f-45a5-8e5f-03601b26f483", "eventTime": "2018-04-16T11:55:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: MeNI_nbfZ1zKuRPDpYwUuZDixPbNkZEJhxTqZ83Zx6Ztcmi8xsXHhbRj7DBzmDf_tImfLxOuUQythTLBKe_ZP_8VSLwTz2ohLMITPSlIw1Bye80FjveTQME4WK6yxEfj4L-LgbG1qSsALCBR-6r6DRekEmov_Er99l95Smxu_-PM4E_YQRDU_eXI6dWGnayOiq8p7Fm16E-pG9xr628XFtUmi8wylHkcCHUhntGJ0eH8rlxaoHGJnVErp1JiROCa15pMHb29iTwAUhVW0Bmwu8I-Osfn01t2Q_Q44iJby_mKimch0XFNRwetBgYS7DQNM9wt-zAjZjwWtwJm3KYD8aMsiGbL8wzUeBEd5sfBLrz_FaXlQNoCpYpy3LB9oje46PXyj-HYaTp1fAAsLWmwwFwJdIDGt92sz5hpONpTnGccrD84j6Cy7JRygVrVFS_Cuyl8I7RQReZ46v3KtAtLPflPtvs-t0T4elSeClv1NfgoXD9_wbWaW0XgQSb2lfDrjUkoTiETyRuEigz51RKZ6uSmNjZp5yjviX-gYNnghtsWEiOP5M-rpsFAQJMMMQBEY7NlqHn9f6YCYm1cEQ0kjbNYddUITeaZbqkTGm0vG8M9P_yDsAEBTm4NqmDNNn28Yaw06UBXSNNj9vAKaiOum573EVQ-ovcDfw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc8d536f-c5e6-4986-9fc2-582617e8f739", "record_id": "flaws_cloudtrail:0000495:fc8d536f-c5e6-4986-9fc2-582617e8f739", "row_index": 495, "timestamp": "2018-04-16T11:55:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1750, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc8d536f-c5e6-4986-9fc2-582617e8f739", "eventTime": "2018-04-16T11:55:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: o1HK-U0HB5SHyKkme0wg34V9Ce0A1SVsubL3iNc9GTjF20yDGM5j_wG8PXy2h4is2pgrfJ4jdslgyC5GS89Sy6Hp62yEFG9UrR3DYFeE_PGmVZOvCW2UtNjxtOXVxlvRp-yzwM4InGJpEaPY_ihwqAqegG5iOQ4Eb6bC6g_UV5HmiOiiYBGy330Odx5NkB21CZro7gPC-r27xUtwLqguwAOL57OmEboLXtZtBWfGFPAjTO_mVksBou8VyJ6YWQOiLInZ9VnQv8fNE6YeHhQKcE2MM4tn_PcxPlVpblXGNyejIBoR60lw5ie-wmXcC-Y4ghgQrtAFLttUoVnG2aEmyMGEvt3lymVDo0BAm82IXLFHgj2rfC95u_WR99Jmgk5iHWyWhcQB3IeDZnLxcipaEUcs5OGM2GlRgeaj-gVRJvnx3DxvVnGEgUFomc73tm6KTO6hDQypjIXPZ9RNpCMIIwbvEBwPNyoeXUfIu9zdfos-8Hxm0oy_VussH710lIjSHFkvU8YrUOZTyF1RLQYDra7ffYjM_yy2Jbm37EUXjw5S30I-sZH4P4b4fMnbC4aexOMGBwmeYUYTJBclG4kWVyKHKUZdt5gKGYLX3GKdk4L-PiA5ozj7yam0LgBNUzGS7Ggod1HO_H2LmiLYg8cezuPveRuKnv2hIw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fd287815-ad9f-49a2-8432-3160b78272eb", "record_id": "flaws_cloudtrail:0000496:7fd287815-ad9f-49a2-8432-3160b78272eb", "row_index": 496, "timestamp": "2018-04-16T11:55:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1752, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fd287815-ad9f-49a2-8432-3160b78272eb", "eventTime": "2018-04-16T11:55:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 4oMgmcZKoaX52a2aIJDcNxt-a89IBMmiCt2rP1DhF69iIbkeZzVYBW9hHlyHDOlf_WHlyIWt9Rna8zqh45A7u7iM5Id0lDs3nSpjppf2Re644XDCnwf56vQ-nzrAXHLgPxri5fwudUHrkldu5nsvcxutfxhlIKwsMrklAgb83wMGX7kIt26_4V46k8WX0qavUjf5wUCbP4sU86LeI7LkOy7eNzw01J8Lnqqr3txzmxhsPWK_REHjMzQ5xqjanN3-fP6ahbopfT6_eRpHRMkNc5FZUhv9sT-RS1T7cyaOBcB5icljbVJiDz5aa7Pw18ixJWXwPhNwkxVxIs9oDJ80GpeD8CbuzrZdx11IrCfhC8EzzI7UrdB-dVqJ1qJ-3fTnCJY6kt1wv7HdlxiOvabGBDw1KZNTBi0R9b2vyHA1I90v9WMpmb_Vv2yQpa4ldktLknSM5SeguyRDSc_V6IJUzo_qhpqn1JVJxZf_n9Wz_xPPX3xuxIbM9apNa6DF0x8hC0eKZuAyEQwuJx7AC0-8USN-Yh83rznZSTaCWkKop0B9lyXlWhp9qrtILLQ-99RrFDXQg3ZAna7w0KB0sULIEbY-cm4AkhHOCwmd4l0xpTy_G9_UK0B5wrtOIfffZmR9J4q4LEk5qspLLz1gFQ25nws2NGlZvLpaA_4", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.12xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6a36a22-2266-4455-b256-6eb77aa560d8", "record_id": "flaws_cloudtrail:0000497:b6a36a22-2266-4455-b256-6eb77aa560d8", "row_index": 497, "timestamp": "2018-04-16T11:55:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6a36a22-2266-4455-b256-6eb77aa560d8", "eventTime": "2018-04-16T11:55:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 4cio_FEqfXxW6P-E5lMXBhAH6j3z8Cql2uz2ifvJSU0gW7iinzwiCkvEh6IsxwWHUadeltuaLkU2n26t9JQ2PHfuJQkk2PxdKBL5t9iij4siEC4xOT_1tRO3cgwu93AG5c2EZxuZGB79GuT0VRS4EAqb5Wj4wD8LfwnQ7hfV5HCmovmOY3WaPJ5nkS8sRE9LL92Le_rpRM9hSFcXXSS5-XV3eBI_OK9MH66rW8ps2DK8sJP8BG9e6yf17kH3RgN0iIA1lwS4JsrAal4LYbZNx8ocIzlECatFBA6AhLDCsSE8PSiHyn91XioJz8aTkrePeBHbDdmOwyjgTdkYT6D14ngug9LpQoA4u6MWITbRqjusVsqKFRZxMVujdMJiPNQyFg7CeXlq2qkVZDPsEldyeLeQG-HbccYkq-b5rFih6Tj0p_u_PVX6HNHPBGw7hyRMhQz1pq_fTdKqezbcEyJzK5xNNwkXQjbSun1eVfX5j4z45hk5a3gElwVy3pUistnxqQeSAvUJR2U1NZAE1OGE4K2Dp-kB5GY_iYbHndWigji0zVKLna-dyDuuRGeiLc7Y4TiPmOtl_rc_HdjcTtIXEwYzYiNapwYRqoY1b5LPXzIm63DKA2QAOh2GOOpCaS3QbkhuCobE0RqBK3wchvGZ_K12Y2DiSr7PqA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef7ac184-0f03-4fba-a7f8-74b51296e2c9", "record_id": "flaws_cloudtrail:0000498:ef7ac184-0f03-4fba-a7f8-74b51296e2c9", "row_index": 498, "timestamp": "2018-04-16T11:55:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef7ac184-0f03-4fba-a7f8-74b51296e2c9", "eventTime": "2018-04-16T11:55:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: XZrVHBps4ZCBvGw74msWGwmRi5o_AnE_wl4TCjqQ9WNQvAsqbFlUvUAZBy6hPk_Zl6_Y2Gev9mQkuZ6CV5BqvURN8dShq2vGGX0nJP5Dy6ehZ21U3zwcMkGH8R-_tX-andhE-9n11EtzpAfPKzLWIV0zcHSbOzzS7Tn80WWA68AE0fwnlNV9VWqdLwKLRU3qe8OWs5kGcrhWPvl2oFJ4PeDVto3sSej_8dl51JAYJ1lg8QVZRXrnAmFPV08bF8B2-803fGnoYSiUP-IJbXsyhyY4T6hF_kMdqVMpB5-5tA9Tumrm4qa7NdsW2myjIIuQpj2BJr8j27nPvgGJ4N8TjAUfEJiEVH8de05qpD2BJYZMa4C3eR-qMr2XbNsZM5d-p-lZIn5U9TSwvNegFLEWo6fAQ2Ejd8hI6eCDlJVbk9MwqeIsjkHxcPeh_9fF5J9CNJHNv3roQbmmzIhlBQQtfidhUP0eoW4kr5meFr9vZwwXZngRkh6yD2XuYDKeqqzCywHD5CpYE2-p9bA4EBuTuLBw2lMQNn5Zcdeerhg_eMq1LDkNVIPOfjTrYTGYx8nHP2mIA2nBRJpSG-UhmGNI1uRfzVTcB8EjYcEjnJ1g0qpIizrlYL50_FPo5759cARfzEQdCkp1ZKG9YBd1KUTLKfVgWUQBmxz13w", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.10xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a857155b3-09e7-4652-91c6-7f791a5f3dea", "record_id": "flaws_cloudtrail:0000499:a857155b3-09e7-4652-91c6-7f791a5f3dea", "row_index": 499, "timestamp": "2018-04-16T11:55:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a857155b3-09e7-4652-91c6-7f791a5f3dea", "eventTime": "2018-04-16T11:55:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ZcfKlLTc3J3moT8Gv7i6-3iXXcbRBsUlYifz1-wST-7d6zyHvWCNj5QQSQfOjyPZgogCcfa_VSD-YmGEyP65d-JFwE91Mxlrlwf7GmhryTsvL7O5jRDZsAW8r9G6aM3F9K1KkacLpk8tQglXSlgTAtc-GeYa8n-wNI3FdW0YvEzbe7FmaRPDEpDfY2pRo8FoCEHPs5ZF6WoGICVyt7EraVAHyrnj1Crwx-jarjWHJPJDfhmjx48195LnU-kojK0n9t-fI3rVwc8pADvT73ItqoWQtMB-b1V68vmvOl8tKucbegXWFp4uyeITqIQHbEPXIY1sA9zlAzn_VTGpwj3eCuQsD70BOsiVxcAWmrQfrAxZV_P9tYLS0Z-1uN2DcOdHJV2K_1QGxOiU4E2frhK5ROBmiILTQ9SKNTBFkuD6G4_ZfNc1-N5CONdy6sqmSUs4UN5Vkoek74ropoUeOiJ1PuNJowWwMaEvWQzx4wb-TGpRf3HAKGrA7Lhkf4jBzybx60V60caNuipHrP2yxAl3Zio7uOuxatXlKFFJjF3aamPGCULMH4iiFTFAzA8EPkG7LrSGbK4uz10PYqIOgRQi-1QO3q7tjpWzszreHwrrKaOxuK7X78yrHHrhz2QbiXWf2fzktnP1b8KsHUrSzDtGSAxWTu5SiF4", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.9xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "545b9987-9e10-4162-b9f8-ad098cad568f", "record_id": "flaws_cloudtrail:0000500:545b9987-9e10-4162-b9f8-ad098cad568f", "row_index": 500, "timestamp": "2018-04-16T11:55:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "545b9987-9e10-4162-b9f8-ad098cad568f", "eventTime": "2018-04-16T11:55:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: FNDpprFGp0oXkk2s_w_O4uVAvaYrK4Ac5U3y2RdCp4eZQ3tmuvz6Ff4PzCOy55SZnM5UD-7rvEU-unM55SqaxgdhZbusHl3AnEAPXc1XLrgNn3elbHUetVZjWd7TYg3rEmo0Ge9sunRXiXOVqAxhtFdzYzDiCXK-060viB-WD-AcUhseGVfUHeAwXJG2v5D3jmlXg26oIWU635vUkmrRZ2WqPGoXnc6BMHcNXiZwHwxsWueyp3WUYHqvcHBpeioVPJmyeaeNZdWKsnoI7m4URKcm0mr_nhz4d0lGaGWfqBbBIBxvEDiBjF18pnhgcai0PPq5QUNWPVTS_abS0A7wIt5LrwdTqLsIirAv3lE-AWXWaIGTIXMPf3cnd2hO3jRU4ZTrGxgbSaOy67OhuzuOWUPMUibjKKDhgb-TCLbL3_dEuh0dK6aLAx7GD13OlKzBJs0i1ZFkiWc7Dtpfc25-mtlOfH6CnSBDimqqZAVXIz8wn7XZVSWCjspwbcNwCKddE-iEnHHB6rFX5xDV5gWsCHDkJPBGXxqv394DY3mGpdO757res9qKLm4RA01BK5HmxCO21wk1uwJDRWmORuzTyXLk_Jl3C4IDi11Jj2PzJU1z7GjDhZiuqi75o_3c1KUR9nMR3gRLBv_T9S7X2cCacGKDQvN0QnlD", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f676c2f-7b7b-4535-ba23-8003a07c5941", "record_id": "flaws_cloudtrail:0000501:5f676c2f-7b7b-4535-ba23-8003a07c5941", "row_index": 501, "timestamp": "2018-04-16T11:55:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f676c2f-7b7b-4535-ba23-8003a07c5941", "eventTime": "2018-04-16T11:55:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: BaMhjAImXRxYwQ5dAbAn4qQ88_GcaZ-sd1oyDaaM20vg85ndpxd2FlQgigJdHI7LeT3ADa_yL0vqYL1nJJriEug0zQf7QdGDNlFRCVryKehLVKANdtdJ6q0BXHB07ZNInUE9YZ5Iv3IOasnQxb9yl1_Rd5mG5yDksnVg9NYNLYAhA7XolcZxsXMb5tERlsNU-mBR5iQ2ndzDriGVjr7cxGI5XuhHYwOGRaYFa6Q60QIXqnpstMLpC9QInuTeQb4Cuxr1MfDkVxx1v0Fq6jxtHnNZvzoOtPM15WeNr9fcWybJ950KWgrR-ssSJDXDbQOT5ynrZqNu8-iJ5rU8sxafwzVJ1IkaO0NUkA--SH7s7LLlY1tGPf54YHhEAiiydmgeUImevnO8mHYh95hFkg5gQ37BEKw8fiE3VWQDn0EHNMevIhJvaffOXKEJHGgJLhfR7WlDlJb58LlzXn4KeVydunDv4ZKm6TPamQInnzQb_8dsbM6IIxy0U1i8Z9LcYahBoSrfTXCar_JkhYz0gAVPdKf04kzcDUt1yiyGRTQ4MP6n310qviMw8OtbmHHHduu9k-8BMb0qBnidPq4PLfLflRL2kIIQjRFN9P6_Lkzxwj69aDAmen9WHv5_6RgCKamDWjFpGNDZjmreHk1s6GVdCSOVazhhQ_9z", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e70c396a-7738-4bcb-b665-95cd9538dae9", "record_id": "flaws_cloudtrail:0000502:e70c396a-7738-4bcb-b665-95cd9538dae9", "row_index": 502, "timestamp": "2018-04-16T11:55:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e70c396a-7738-4bcb-b665-95cd9538dae9", "eventTime": "2018-04-16T11:55:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: mebzrTQMNYTbFHAOiyh4VwtSxu84GjoD_OjvGYdm3_fmcVIjWvLZkZhZxBtT3L_s68PBCeFjbNVV-z0XJ5Mf-Hfqqpfwi-SAQ7iV47VCwjUVUugylS_hs0Nlw3VDocaZUyEvNPHyXBQ5Arv9vkoIsOdMSgiZU6RqaJGPBt9e59jxnFALcq4f-0KxVwbBxwo-U5OTCp-ANQX1wyeBxkJo-3vrHEbI9hikRlfnKfhxLcoxidvD33vo8g-iKWWY7KRMOFbKD3bftalD_RIgCiI2xBcqfwGMS8_cK6-5fP1JzOVut-nc8xNLGmT76Q9qfRrNnIA1WZgQhgAEW_qVc4XgS4dug9pE1xCHf_Ijlq0C0rfbmJ2J4UFgv15ee3NfRusUkoRUnFx7Z9gCZT4CUl92PNLPUI2V-qLz_j4QVlGiNG0HPEDjQgv8S_onFg539lCDTnfge4z2z3PV-S5NVZ6PG0fXVnK5PlDFdomul5kNwX_GxfIGL8dpNp18LUTRMn9P7C5avP5yATPGy-GyGpprj_efAll-C45h0d3j3anb_S_VbMApScJLfnO0EOeh88PBEgaVU4QjQ83WXcXpaFzWTMEflOFNn5XRBM-sLOCPnVNzXh_wDZyCFd647h1yr6n8jbgdlAXh1hoVNSHWiSWy_6Bx8namN9Uj9g", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00bfc17d-a75d-461a-9701-6dbca531ecdb", "record_id": "flaws_cloudtrail:0000503:00bfc17d-a75d-461a-9701-6dbca531ecdb", "row_index": 503, "timestamp": "2018-04-16T11:55:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00bfc17d-a75d-461a-9701-6dbca531ecdb", "eventTime": "2018-04-16T11:55:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: zB1kasPSHu7msbjJYrryJGX0_GH-xvJ4t7QJWYN-AXu5G_lmaLErztCmxsB55lxWxv4P2QiUmQu2gpPNrrNmsCm4BRG5q87zTZ9mS4TrilCd2lzNnhMX4K70Behi_nxRGGZIVu9zhxmhSNnMXABILsQw4rT1fEmsXwz_oSq49Lh-Ev5cdX6ngmn5uEE18AiRsex7tE1Hz1XgpmaIdrdmHtwm7xmfqiMQHzJ61PXY-BwZjnyLX_sun13KfTm73pXtLg8PTcugboPAHbzf62yo_h9oXZSP9P8kAdIETfY2r5p6z4Hd9hGpx5M2lqbrQFFH_seWZuIFCG7m2aX7gkemD7IKNQSWwEjXZof7sFiAzGbIPZi8TW8zA0SAMca_hV4nMuZ9LG9VOF6r3iHMJK8x3u7SeI7LNvHGb3v5lAd_G_njj-ruuVHoIC_PbXw2Vn1BK3LzATpCmSLgv-AvljtG5FMrHdGf_ZrvFGME9_SkPHj4s6_RROUEtwe80uSZwq6_uNkNA85WL-wgaUOVVI2pPmf7tKLfqTt3noF0PYkPCd6EydSDwwOq-c47j9hSiJ6i51r4kakGsjrEo0b91fbNcQU5UBq-P7GRHUw6Xes3a_uUyl0IY2R7pFofhq12At__hrfmTDm-nVWM4dV6_eZ6sJoBA5gLiJs", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aae1a4c3-d67b-4142-b582-cd3cdcf47001", "record_id": "flaws_cloudtrail:0000504:aae1a4c3-d67b-4142-b582-cd3cdcf47001", "row_index": 504, "timestamp": "2018-04-16T11:55:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aae1a4c3-d67b-4142-b582-cd3cdcf47001", "eventTime": "2018-04-16T11:55:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ISd4wiDlmjh_kDC0KDumgLkmz2EaeMcChgahDp4kTeL3GJGwtRFXp1FkuajR-RJ7CJl7-y82NmP2ad6DLBqSPjhjGHCH0E4G59D-OJAzfLFDjD6slS7LcQKOSlUn-NjxBrN4xwLqyftohksntPjqCuISVNGm6aHA7gwKleynqLLOzODpO0V-Mmnhz4CYue77K5aIaT1-yODWc_zuQ150vZfMlBxr-aC24zSI2_e2oDFZdj0hBi-x107H_gkcxV49WmCJOSwoo0OjcmAjZPDNS3hMPFiN85y-yUq0aMjXztfOH7ODpDLfOi8M16vk7U7_O4Ch71C0RB2_WQInum5aZo9m1g6uQ0eU1wANdtW6j2zREbAG4uB1K6MANUe05Hduk1aHl5JZJgWrbp4Bg8zow645chNsDHWITNlkzufVc-WpmFcag4t4dNBp96WFrAEled1FcMaM4_L-QbtXbSWzg3PX5vILCzQ4HZkNCYZ-n4LOFQLEwG7tMkoOKd8a4U1sfr0OiyjIwstn2UKEcFzquJDooKGA4xU0WZ0wKI3vK-w93kot1VC4rG89fH-XZl5b5KPD6kQpN0M7gLXFQ2q_zRLuAJwy-riSu1BK0rRR00CSX4Eee4xu8IsegsCNAG4sYRkyRvnBNgbONNG8PzGH7oBu-3ibOxE3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83c0a474-2629-4348-bd48-bf2c6bd8b34f", "record_id": "flaws_cloudtrail:0000505:83c0a474-2629-4348-bd48-bf2c6bd8b34f", "row_index": 505, "timestamp": "2018-04-16T11:55:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83c0a474-2629-4348-bd48-bf2c6bd8b34f", "eventTime": "2018-04-16T11:55:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: exk8RSSqeZ6R93TNEcsy49S3gH2pkzE5n2Ov6aIjc-cOr8zG0lxXrabe-a3-7QF0mnnAWYnoCBKoxYS6d_S-qzvUSnUbjKJU1ORDo4XLBKYiBCvzPPutqvT4jPLyGsJvTYSogsAchme9TezxwAa18lqajxnWacl1FIdiFQAn_1tV09OdjsACzDCEqSViwAdCJ396xae_8p1kdRYFtb8jpSfoxcOgfN1xDvJTgjyILeQH77o5wMrfqiwolAXGdEGvDQzZ9QZwqk_o2kLeoV6K0swNWoeO4_eBxc2DW5onTBryBpK2OO_rOMTpL04pyt4ZrZERi65PZ_vL7n5rUmJxUYeOeus78iZi5qB69LlRv2QDz1Xzv7fRkC1kdmVbpD2IxxVM-MEegsvMJ3bbEaiunXGD2bg6Kec3RbdtgE9--08ytmRKZanKnindGNvXKbYn_eNLtTfX6wpDrYwW6tjzZtKVdIVNWyI9KfowkSkMoBsBXKpKxNexG7KdfP4SREAOFFxmdf4dU7rqMymHhji72lqpGbS7Cztrulycez2Hwgz3Gqfp7Lw9EfuZfyeDBRtXo3vuKgBdEbzPSoeOkrIyCgsbkgxOCq2ebyI4NT71r4CEYWNmpApr80KENhNenIPXoh8ySjAnL0-FjTthg7RfqnHimtOTcQXa", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22fcb9a2-9c6f-4124-be1f-1c6dac12f021", "record_id": "flaws_cloudtrail:0000506:22fcb9a2-9c6f-4124-be1f-1c6dac12f021", "row_index": 506, "timestamp": "2018-04-16T11:55:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1745, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22fcb9a2-9c6f-4124-be1f-1c6dac12f021", "eventTime": "2018-04-16T11:55:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 9WTNVp_81oxgb137t3qL2yEqiYq21LSTCzDxvoKEKpaZrx2FQjHI8A9d-r4OejPC1LDPhTaHd6GvOTT7FfOLPZL_-0YCcUUNohA1CDuscJT7AG6vW5uOK2-uKv9i8GS2vTvs1qjLf9TjSMXyFADOdWOgOCXk5W-cn3lofifOS_-xo3GhellNLvn7XMWf3ksT_6PPAE0KNGU0baQk2WrI_vgdUivrA3l6lIzB_mTD5pCfYIgOecuV725DIE3aE8poscGzRBtV13t-Ru_pZMEiPPlMo65FSC2FobY8XEIyjb8CXt8EMA-5_1yCjKSbJ26Rw9cF9CGLXL7y44lXCDMHBTcIk6snp8HaznR1XeZU78ceoUV3kEa3GGK1onYYHLvFF5ke6DaKqUQwgl1OFlTpvbx-DCssSTNit2cSn-JSfSZJrh8i2-3oAajOvXR338bkfjj-tszVXVUzOCub7RKLk0QLKzVNTSK0eecQ8b3Hwj23_qKtTceJlNaG2BOAUlM_7R3p78QBUhYfxXoScGNq1X-lG7-sng5qxlV-HSjAHsjg3GLKUefNTlvrrrmr5TCYiAXwm22FP7m41KSdOqdtgmNNFLYPZZr6pS6LtU7SObDxLo_ItTRt93X2cOtriVJBGq-hpYlcaN0Qq4CPE35qNuWcyh4Zzbo1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18695c-0acb-41be-94e9-190d1b2dc65c", "record_id": "flaws_cloudtrail:0000507:18695c-0acb-41be-94e9-190d1b2dc65c", "row_index": 507, "timestamp": "2018-04-16T11:55:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1745, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18695c-0acb-41be-94e9-190d1b2dc65c", "eventTime": "2018-04-16T11:55:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Aq19VsnyYV4mnokFKn8ZZPXk83wlOUh4GGcpI3zB6-G8XyJNhX_BPjNE9W3rW0sSpfauvQqI8zqKTbAU5RZH74wy3k9m2T5hGj4n3YwE6sOkadpGUQ0L92HKCBXNB72YLTq_SgcS-Mi_XI8bdoqZynXpVHPJw34JuQjklnOAbl8bHL-m_yETKGKZqSXe61Cu4abVPPzEWpB2TeZU0QHufvO9yUsM5OX1Tjzcw-W6LVv0Edz8vTmRFFB5eqdM6dH_GDXS58O4FbsgIbEMJfKpXJlG0mvftEw7x3L1tfPGisvb_DvClP-CLJyWE1PAhr7b3KFpxLzsb3Fx3MR6uueS0yGadZjcjvg9iofD-bNk9Rw_6MqMqLX2guddINOSLv7mmnEh0WENDl91ZVmqatFCZIP6mzqNYWgyOpvv6RyER20Rfi8r9wJsuurV7Ih0Xijyul7h4mLNtCdI0nq2oWpliyYr9lK3_lVyrQi6LgGVetNsp-kcOZuOs-tWEMc2CeAy9UE4DY8gYuoiwmGvEqVejiYVVeqloAWNOzLXx1i8hluYiqyCs-hbs5n0tMLKq-F8_98InE9Jmf0t8IvbBnoZu76Opz4wQxIrnkVZUYzPUwKUwN0NV7ydmqGa8DaZPqArnYx-z_CzNx3Btpy0123V0YNFZCRh4yto", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb1ac705-58af-413c-ae89-e3facd72bde7", "record_id": "flaws_cloudtrail:0000508:cb1ac705-58af-413c-ae89-e3facd72bde7", "row_index": 508, "timestamp": "2018-04-16T11:55:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb1ac705-58af-413c-ae89-e3facd72bde7", "eventTime": "2018-04-16T11:55:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: A9fVhJbhop59mp5Bj1x3I_VOlvH09zsuPJlAihmRdasYgAHH5WWhxrGdYO29tNSb1zoBCE7Zb5Mhmc4D2rP6ds0TQlyTUgApLT0s9goi5_EPQ6ZL8TwLVr7drSvoDKPJ21eMvwRwyWyqUEO-U2DbwxVT23wW9jGfrL4fBZWDhTytNuWsS-e040LNLq3ye8GBHi1CKodx_v338IBq6o59U5iIJ8QW8OHRCaOu-sSyxHFe7st4Aa49MFlTE2YWArUw_-xJNZBZWaiV_36MvWXxM-uz-KFIJVJWMwkMCHfW87W-VHHTl-528UyC_QXbMkG5ovztOkm4DZkWkiy26ePHqikgLiJEE8iNneFnn3zl21EuAKVFti02OzFMTalFh-gN4aTE02E7tVZHZAv_XBlP_UJCsAcP4Jkp9XhXgwDtS8YRDgYVRbsxS5Sq2s9ehuJK855XlbSOrUfu3wb3moNvXOTC6oImPixYh1ddmI17dq5FBmKg7-4ZeiCpPlsmvrYQgsPRG7zTpB3dliKdBkKL-NZ8FAk0cAQM6djyQSLPUgkHMMXN77wYYR6cIcQ2rOi9-NO84ca-RuOS2aGtY_ttzwOSLR2ywF80S0zfEHkGo9rZKAnhCXkc50GqZzGspTpQ3fBuoAKH3ADYM3Ncj9he5n9Tw0Ki1fmf", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67b7ae84-c14d-4534-8b34-c38829b7755f", "record_id": "flaws_cloudtrail:0000509:67b7ae84-c14d-4534-8b34-c38829b7755f", "row_index": 509, "timestamp": "2018-04-16T11:55:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67b7ae84-c14d-4534-8b34-c38829b7755f", "eventTime": "2018-04-16T11:55:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: G4d7bjZV6GY_iye552cP2g91q9wZNxuZyOOdcyKlY4IzgX9eQ_dJH2MvlnF9FTl-UTS5639MFAhxs_peVsZl6pnd5PSdMv39B3vgOyMEsbr5IF21mpdOWq8aJ0TXJHjWZVNW5nfMkd1fuPahacKHAVRQeYMHZ8HrOvrKB_HSYp5A1NeCQRN0Sf_-82FhLg4ghVkRvLdSI6o92LfdWzWUxYwzDK0IPl07o8ebpD5mlHAdyJ2KtwBlZG-51TaePsuyBvi4td4YAso3M0Ck9FQFGX-fspWUUOgUrlWEJ5R4bVz5YNVQfORROYqLmSHu3NTBP5jR5fCRq7zf_KTl-zRaBVj6mqWdzniN10o3CVQTPeih0ovrFNO3O2sT1qBrhjTveQjOhvTY9uywsm4JK5EnSISRCBBArb-WAvJll_r2X_qFhZdHugFhi6ITaLbaBMPB5L0Y5Ml5dLkrpy8XRxDYhECCiSMuCXiYw_v55XaiG-Tb7wAJsqxMuf7feNiIfMKmT0f4KcgqI121u7_kiL1qCXlFUAU3c1NiLk4Kk6zNnA2u5BRqTYdm3V1FAZNxpgxLuPIh0dswwcKb1Mif2PygBUA8S0UrNhZujGX9Ul14V6sj7TmMUpLLMVtIgVMxPlIbzZ8AtbnveTlnbI1A91VzOmCRqLlY1XrL", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1d266bd-df58-42f0-a10b-dbdc0a42e8d0", "record_id": "flaws_cloudtrail:0000510:a1d266bd-df58-42f0-a10b-dbdc0a42e8d0", "row_index": 510, "timestamp": "2018-04-16T11:55:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1d266bd-df58-42f0-a10b-dbdc0a42e8d0", "eventTime": "2018-04-16T11:55:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: KPGvPkw03lqvxjquEtrVSzNR4irHMY0nxb_q5PWHdym7mL3dtJBTkmM0Vp4bQNzs0lnswVXelH51pXuTZef3_9v8LPnauEY4n6-SzgK0NWOKVmJgHu9rj8a7nxC9aGGMEm89oxUmqCQPQ2L-5M7DP2FHA4ST-QegY8uswiYJkeSXTABK3XvjZTUCrs8RXH7Bgiy2DSB3Zl5eLAu81e0OhLT_jBZa_WDQU_VI-xJlcIj8k_Jr1fPQCn-E3IXds3Pw00Vej6j2jnYx7jHkKVSkB1AvvdQYHvUU9wgFBu4AzgdgbzKQJW5HBap0VL0pRNpSJxLH38nV_AMOAFq54T5s7Zqpv7hI1myR9G0Yp4NZyU7os_6unkVT4-Yws-p2_pEFGFBWixRzmdvzIiqFdQbXuXG__bXwsjebyFwrQ3ptRBZwgZzM83evB3Vqx0G8rL7hGqX1GDWJedn6HAC1TKBtmeF_nQ9BWMVZ3s-wJ3F91ZdgdagU82FhiOpCcn-0lOMJz3koefTKEcdFL1arIUz7FmlLodEd1xaHgayJDMMq_6OLqbznUhOt8zUlzTKHAVHfVcD83e5TDCxMa_U6TaK2PCMUgj1RghC86Hd6xqFBo0hwwtFOFagm-M4_LjAu0Vr6KshvEktNgz5ja4fpvHLEmxZUTHI06Rgipg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78f73cfa-23e2-40f1-849e-2977ebafd82b", "record_id": "flaws_cloudtrail:0000511:78f73cfa-23e2-40f1-849e-2977ebafd82b", "row_index": 511, "timestamp": "2018-04-16T11:55:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78f73cfa-23e2-40f1-849e-2977ebafd82b", "eventTime": "2018-04-16T11:55:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: OXqNsSX4jktua5C8JDNIfG7Wd-iX76Wo-BGuGlieDI7EZDBrqSqnGTLVr7nrlh6MPKdh6aSHcWCu7_pYIEm0LYxcoqVnPIajALEe-nwwkHFKhB68LJ7A10e3Dn84FrkB-y-7W70CRJr8uvA3-9aty-e7HDrVfHCNN4JUhWePxWg3n1OmQocTqNMaDSfBw6qpQGv1XTToMVIhI7TwqfR-DjU1s40MA2HICN4frdeDG9CW_VVYjwmIWPT_vKdGg1M6qY2KKOGvhwNW4bMRwW6fQQmkXEXtLKuh1bJD9NfP-GhOjGz5CRZ1FId-M3D12eM7Zu9dKX0Rc3ohpGKD3vJyYMeblr9TnLRPN_RdghWYqweZSmSs25D_MLr8OfPDB53ExsJR-e4tEGQBE-y-rMVHNGN2enQOW97eT6hPc193Xx-xuhgjSj4g-_OPvU9ootVn3za9_NB2P8tM47jkZCOA1aGzDYm2zjLFUZD-TFJJxh0PimpX-1cG529d72OwA8oXhb_uAvMzw71oASpg3vIzWwocyalou7j4He3Tl2j2_QhQ_AVzOQ7q0BH7oI2S2IoW4OzYxy00EgHkVB37FZ1CtkIdX1zBdCABq3L-DmL1EiT2qEYW2cfyZKKVYrr6gbcL-kRL4rvGK9V80-EoJDId8vMge5uwGuP-oQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ab6d59e-140a-4eaa-bb9f-6393f76396e7", "record_id": "flaws_cloudtrail:0000512:6ab6d59e-140a-4eaa-bb9f-6393f76396e7", "row_index": 512, "timestamp": "2018-04-16T11:55:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ab6d59e-140a-4eaa-bb9f-6393f76396e7", "eventTime": "2018-04-16T11:55:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: i9rqGwEG4cEYFvoD_WNUr8KRGXbeWu9D52nwVGjMeR-9XCfesw1jeE8LRdyJcOYGx8trA1TK-b01cLiwtGfZ4EJNeHv-01cTaRpGc7SjYQKbgqqwZloPxXMbtgW8cWzo7YOBiNT56NkNWIkMd_47PnUesk55L9fVkhcv0Y-P76FlK3yGRQRi9tubHhp5d_VZXNTWo54UwEr-r6bt3c50Wq1FJV8ONrJR3pD91b6Q6yQqR6Y6RXiFu_lZohFMSd6HZf2RX7-9mD-ecx4faPHXD9LYHP81_wk3J49EYH2j81rIbabodQ200rCFOEcKwY_9YNPZxh2BnnMUObYaegFynFuat7kWpiI1JQ95B8MYkkX-NYNHn5IUjQ1O0rzNRfG5GZyJMTkZKGmdKtVb2yE0pplAqb73KfpsJoO-PkzPTVYhrVgmnlCeL6aXlCyFT_5ldzzcH7GyhrdPnEMxqZO4FZioiqltFG1eavZziESDWF641Ta64BLf5IcSgXzdQsiyFMPkMrf3yXmSjSb-sRHNXEeRW-X8OX_BnG0LmkCSfRLfbj23Q_-cJ6ACQ0ZiYhQXH7ikzHJrqbqZ9BpD69xGe5LWk2j-q1odEzxPHfFO-Q9rUAYPvYcppw7nXHRp_-5f0m5-JDFbRH0g3yj_aNqSxwQO4RUQvrrj", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e01b82d-538b-4355-bf39-85cc213cf84f", "record_id": "flaws_cloudtrail:0000513:5e01b82d-538b-4355-bf39-85cc213cf84f", "row_index": 513, "timestamp": "2018-04-16T11:55:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e01b82d-538b-4355-bf39-85cc213cf84f", "eventTime": "2018-04-16T11:55:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: oZFtr8CviGSTKigXVIZtRTTdhRHwjJ560oXtdge6qxPb2j_ENZRcC52lN9-QqFbUeHNXZH8AXrXd-MRmHVnUVGwE0iIx9BrYj73a_XRl7fLMO1Bv18rtG6tTA-KK0205x606DP68uzsC3OZ1wp5GxLhnx2d2_q9SFuXPaSIHqgs1tC1BzJnMjdOFlt05AjMzIH0fHnzzKZSCi0SeYLXlDmVkZqsM4rF4AJuVBAr7nhMSAfmnJR0fkm7_7Kd0GxTxOYs5WPidP4M0F038eKpbg_krhMhvDxeDO36s6aScm2Ad-Q1yzgBarS9oNN9u3Hl_OivwBZj8ms0dr0EJpPr14cWPeYFdGKsiYzNbQYDgmjvEO5mzNylk9KEFO6jLV3prCebNojxqIDGzGMlQthaAlVqKCL6oOlVjKWa912S27RB4xKVOOhmoubrlGFoFjaTgTzFSC5Lox-x081xHVEYXN-JItIo5YmUHOUtWwhvT7ZAmsQnVuAla6EMgjfWbiI5C0IXpUk2tMmWSKYFM7xwqDT4v1qo4rxT_G8WlwEzKP_ks1Ugtpf6jMSQwrFbDhuRDq8SyCgqauCM30hSIzWZU-HphmQYlxpkoMrm7KVSp_7vwis8TkWyPLgpnSj5KMJv0Q0JQB8U-1VpkFPN__JJHY_zPMi2goRhO", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6acf732-8693-4976-9c3d-b2daf8530392", "record_id": "flaws_cloudtrail:0000514:b6acf732-8693-4976-9c3d-b2daf8530392", "row_index": 514, "timestamp": "2018-04-16T11:55:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6acf732-8693-4976-9c3d-b2daf8530392", "eventTime": "2018-04-16T11:55:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: bGFrh7MQou11vai-_0IM6TAqQ50zG6i9kJhrnKyONHSGdvMYz4RFvsCqhFCW3B21ggPBLDwYlVKcOdq8yVJ7SfDdC3epvEyHsQuUrqLCsolfXGDy5XbK_KZiazHSHmHCm46Y3TG8oSvhVCdd4Z2JnLNvC_9GsMWEr7gqEnpN4HZLOGQAzE5NvrlB2ta4EW_hi92ySJ6RCzQdwGTwEavZEBTg3Mj0Jl_YluH-QVLpS_tfY3G6IS_eyE0RLlzBcwkCMuwxWDpz-sq3XliL6cFmOW3VRqsiBVagoMFKO5irr0BxLZID_44U50uC31n8mBLg7fgYN-uc3EbcSXI6dwt9ak3aVSM1xdpu83e9pEBqNNLIW7Lp63F9DWBKGX-14YRS2jFCEZgB5jWtL5US60vX-40lqz7299STp0iD82Odhv-Vvyj2Uhu2-YF3j91_7kWfGvbIo-B_GnG4PLeoQkivQBG7UDmm_GmfMnZLIQWoMChy4w7gV5ZVN-WeHkmmruWxOaYgqZ1IE7hr5GzldVoEghHCJZqmQfxtRnlYwYe6bBU2JIRZCQnPzUp82W8u0UGd7lKDwr_YYx8bDC7Sd0K_8h6LOqi8ZxMaTnH0BaddQsqGt_1Ijna5_4TCwnw43ucWL5luHu5VgOUk328-VaBQHdHj2M_wKTUp", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a8b2dc6-bdfe-41d6-b9a2-295698ecfa", "record_id": "flaws_cloudtrail:0000515:4a8b2dc6-bdfe-41d6-b9a2-295698ecfa", "row_index": 515, "timestamp": "2018-04-16T11:55:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a8b2dc6-bdfe-41d6-b9a2-295698ecfa", "eventTime": "2018-04-16T11:55:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: fDTpi4RE0jBF_meIpFeRT0iEe44-epkMZ8VQDCVlYOYClmJ-oCdP7Vp25YLoYICYU9TZn7mbD6vcAWlkvNg_p5uemAU-Yquj4KJrfwn8qgMF_PvUJur9OT00CxJOql-ipMdNc5zVe49rb85FxJd50RhQ8VUPsaDzh6o5ebmcZ_EWyBAsvrY8nXQxc44VmWcxH3BPmGqQa3EiFiBHAXTCnQN85LwsIeiEd1R0aasdp1BQpoqW4TzSjo4YtczadB8P4-O9v-nXCTvcxOK4KTgZSBGRmAA3t5xftojHdMEfIihbUYmbe6s9-nHYIvWlA49VLqsANgyfv2UgA_5OWn2XM29gbwGkH_vXqgsrOqC_cQYizEAlVi0Uvo5tV5cdNtbJNxYeE8MRMw0uZWdoWjmG4SucX3FzFVSVxhqS0JMbySwRtcA3_G_a1gdjFNxSlr0vfBgMXeGQbHRNo5s1u5hbEjwX8JcHMFHhlWACWvrJivke7Ui2_ibavho7FK4vgczYPha71icxDzCQ4BfjDLZnOcn49q59z9ZfgtK3aaF8L9Lkd1Xt3w5qAeEPBVjmKK5-SH_5GqI3eWT-Kq-Qco9sY8mWecByrd859FRlmEGD8IXLIiqHeNyEnYo23C9abdglimaF_a_clA8XlR5ewYILlT7h1Uj2bAsF", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee46b430-c709-4251-92e2-b6c5d32724f9", "record_id": "flaws_cloudtrail:0000516:ee46b430-c709-4251-92e2-b6c5d32724f9", "row_index": 516, "timestamp": "2018-04-16T11:55:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee46b430-c709-4251-92e2-b6c5d32724f9", "eventTime": "2018-04-16T11:55:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: YuuyxQq1HzPysaS7EFIcAJnM8IeCWZtot--0xfemH-RUexDX374VfIv0pJx5n854OrkT-EAIoRyfE5vQF-C4R9qbJqouYg-znDeHQ-PGbyB8atVGXytiXhfnF-c0Yyy88kZ5yz78PilEadp9hwBfhBUjWqFKB7MD5YHLUgUcVQWYqWDRhZ50o3-pQCqXup_IEVME3V5MoM2ABd2h36JdCjyJV8fHx7BwrWOokvBFXfPWFClH62uHTaZvU1nNi7JKSiXTF990Nn3AUxFnqlqN0SRVMGjAp_ilUywiPi280zSPsvV4dvAPlvPB71_4C0_Bf2n5ScD2elOSfyHMcso_N89AAmlgmWV1Ro2DTnjbHVgfCDX4qMF7Xpo0QMasKnstVj2NN8LL7I5Jp8YxSkQ308ln9fx-Lf6ASS1vzT-iMenwjsMLhsIfwXOluJIzghYv52VWNmtqI4aS6vnj7bmD3t2ArQI6n3xN8IBP3ukuQOPqehfFOlBAo2lrnTbqNlN_dZIDMNAd7BlQtZwa87RJunu9OOXS04FfI7PTnCyBoAKn9b4nTOOSIFcPT7Q0u9vclSp6HyzBEmhk6s22QLCHGAqprFknWkNkGHhWC6KTzOodGHOafAX5kc9d7f6Gzn3o6n4mZkoep_-xWUTfohHjMICnaSHTL-Lf", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5ef9af4-94f2-423c-bd0a-249d44bc2f4f", "record_id": "flaws_cloudtrail:0000517:b5ef9af4-94f2-423c-bd0a-249d44bc2f4f", "row_index": 517, "timestamp": "2018-04-16T11:55:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1745, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5ef9af4-94f2-423c-bd0a-249d44bc2f4f", "eventTime": "2018-04-16T11:55:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LY2vwGZ_xUtUteWWDQC-TfRjhJUrRTHUSTT2Wp0qvGgchqY5_rHgLyTFryj8K4TJv1niZqH8YH0vvyzY8TlFLoDRt1rnAWN1PCk5KwPoIdsCKfhR5diMdCXFn0C956FYBIItjOnkb55ZEHOveBNohdDjCkrEPeQSSMW_uamJ5twNyR6GyjYEEacXaOcm5gnFP7Gfd_aiWxoz6UzXzqe97gNwP01OyCZqw99NvbJ1XgIkKVIncdJYP7hPVyiXT3-1bF8ehKFI1OTFQw0oClsb5eKd-o0SWfx8V7VrtHsN-MOlTgdbn2-UrqgVbHX5GE2ko9PuW-O3uuw7Qh9E6BmDHAZUQjV6DC9wtLGSNtuIpOXI1FhVCgCONG12w9JyFNW38enPPb_4ah2rMLDsiiK4m6_XY7JhtZmKwFN_KzM_rAHROktc_28IOa-jPHTOEezuiZX7Z1zpvc9xGOgOs4bIqMQollXcfEIEnkbLMtBmhxY13VF7dYDqnH-Mg4Mkl9KCCUoBUvqRlNAfCjmGpmUruLBcPI7b4OyvrkMg07r51ruj9vl8BzLXuVzENsmiz7EmZnM4X-vPl6aL11qGNFwJ4z3LaVCoYZkvjOleu3XiSYRQnghh1RJh-cP-cimsP-MGfHm3XE8ZeNF68zIgO6vxMW74J0RKxEM", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b0ee030-865e-4a28-89ad-5a055a361cd5", "record_id": "flaws_cloudtrail:0000518:2b0ee030-865e-4a28-89ad-5a055a361cd5", "row_index": 518, "timestamp": "2018-04-16T11:55:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b0ee030-865e-4a28-89ad-5a055a361cd5", "eventTime": "2018-04-16T11:55:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 94gdy7qytMxKwdF1WmUOWzdkf4FEfq1v6_5XiU-OU96g-xe9FM2eeT2VCAuvctU0HnZVE5JEpWBy6cqiVIIQ49vj1QoYeKNnaRUkjZSYFmU5qB4qDk0SgCRGoVoF9rq5azFD6pZ7Gy5XBy2ljDiqMmZN8e79I020nGlplx7tk9bF6RnDrrxpzAJg49t2_YM7Zh7G0GDZ7m8Gq1a0y_Ys8vINQyUpoL0IWZGROg7rqW2wHjAVANv4DIdjNparf87Fgu7MMtiOPNTUYTnDx8mqvdNs6eC6wY7VfNokAqT--OVn1LOGMVbjgUFAy0aG1Rgcld9MThmxctuONANkITJwHgoFUPqEcur7iR9uotxWzwJg8Wkbhv6DKjyruBHKHi6SvHujl-sMrGJTzdoynT4vKvKceeONrbY-HmIABCUzjhuWECpUvqYIlu4j-bczep9wy3MdFVFW9DFlki7-PkYr9ZPkmuFVbUt-tA1aqMnMkCU57azkEu4b-i6PlSRh8-zAOTeZidQNBLPMSDwY3VKx2_u2wwxFoLVmC11tsAyh6MPoH-TpEPPcRCmnX-ytvPwa9giWsHHDnvMuTuOmXOkIK2dkW8bGmpGkMZFThwk08uQwCEwLBWZCoVqgyQ-ndJtrAtB9dT57_db-lCA3pRHKGkr2gn4mioE", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4efa3174-c18b-4f2b-bb8c-5651d244d7b8", "record_id": "flaws_cloudtrail:0000519:4efa3174-c18b-4f2b-bb8c-5651d244d7b8", "row_index": 519, "timestamp": "2018-04-16T11:55:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4efa3174-c18b-4f2b-bb8c-5651d244d7b8", "eventTime": "2018-04-16T11:55:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 3ipuIpdiAcDwJpKEbZ2Ik1NSeJa2NYN1P0RPYu-XB9sc-9np_zeSukZCUSZUl_RkBBMevx1YvAguIC-36bzcbfTC610RK-cfl_o37SFOjQNHGtL13Tq-4TU88vy3ra9xUg6TGU78aeZ3S_L6oyk9-yF8Jaw9JBrpApjNa1u-eBdRunDn256GjuvXobOXfvdioQfMdEokadN2lwYln2vJ-mLCoAYJrmcCPVCtsK4aOfSa-EB9RFHcxyZgtJ0oUdbyNhXRJPFHH2EfmusKdKWVliss4Jan6Qf7A2OOd8NS72UlF96OcESd5w5k5k8WjLY6eKJ7qTqFUcJykuGY89Pd0RzQ8uqezNLxNxCJReNbFYYLJBywuNvSlX6lJFoEwrxqXwV4aOGkNdjU33WOmdOqWDbc8yOAFb5om5zyo2oIFW-C4fb64wpcfR9IAfxxeFbIFWbLZCEBws12qszSt0fJuaCOMqXbdt79j4uo9tbKGOu2N3Je4ASMR8YfiNegtfw7DoHQgj_Dx3bDHNnkkIEITrhg4LIsOsW0F0B667oBnanmMMObJiqNvrLbIv1bwjYFmhybWkBzyDISDjtOIav9T3gjV8A1-7uIsshmbXDg4Wg3xmgK5MmC-3z73jKG9N9pQwpvmKw5JYoZUvmeWOT1POXv1ddNpa0", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "198ecd0e-6574-417b-b24e-4719393a8bef", "record_id": "flaws_cloudtrail:0000520:198ecd0e-6574-417b-b24e-4719393a8bef", "row_index": 520, "timestamp": "2018-04-16T11:55:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1741, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "198ecd0e-6574-417b-b24e-4719393a8bef", "eventTime": "2018-04-16T11:55:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: VgbbjiWSv2Ij1UIjzLCxs4SE7CR1ONgCbx1wByRHPkdwPDdgbkSaK_URCrkVaCtNhMDKsELeggOZyrQsdAwLbJGs9EFD-Z5rEYxW5JLd7kyYDf_ozL8MKceLZ716RUI85un0Ml6KG8OehE4OKjm0xaVjRH-MT1YuzppdRFZAQqjVq2rk8eFznPv7IRHjVqK0lV74SGYEtb5xsL6Ip2Vk76wMV3rAaehldPOvib3A-qKMt9MuS9VqXXLkzg-amtacoHBVSpba5OCaARoYmrhp1a5WTtUMPzGHw_2p9uT2oWp3gKGEgFmQVMKuJb2kXz-3MMQVxStnUQbgR9aDHz80QlSYXC48B0clwMqN9IAzZSyl2aYRa6V-HUx-nAmz3PdGvdojSBaUxqzfTiack5LFcSoyMlm5GrhotVrAV_VSoQdIo-TaTeXUVm3PRVlCtertPQ99A5JeDLJ8M2tSoQzYGH1AMCThZnIz914VApHwBLpDClqyCy1tnrC2bUJoIydL0X2Guqd-H-QHz_pyzbfiwehd91m2NCLm7uNEORZX4f2Sjg046W4SQfp4_eKY7YN63gvYM1LDFPYuWYNsqnULnAVXHcMfh42gQsl7Fq67tyYEDX6SfoQLEkA5caADhUhp2HCILTRgQSOSVuhhhbrhQwMz8QSTbg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad45364a-99db-441c-9a72-f2bd31d453f8", "record_id": "flaws_cloudtrail:0000521:ad45364a-99db-441c-9a72-f2bd31d453f8", "row_index": 521, "timestamp": "2018-04-16T11:55:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad45364a-99db-441c-9a72-f2bd31d453f8", "eventTime": "2018-04-16T11:55:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "Your quota allows for 0 more running instance(s). You requested at least 1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99428bea-3420-401a-8506-167e86efb5b7", "record_id": "flaws_cloudtrail:0000522:99428bea-3420-401a-8506-167e86efb5b7", "row_index": 522, "timestamp": "2018-04-16T11:55:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99428bea-3420-401a-8506-167e86efb5b7", "eventTime": "2018-04-16T11:55:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "Your quota allows for 0 more running instance(s). You requested at least 1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da6cd0cb-e936-483d-8bad-a5fd54a09252", "record_id": "flaws_cloudtrail:0000523:da6cd0cb-e936-483d-8bad-a5fd54a09252", "row_index": 523, "timestamp": "2018-04-16T11:55:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1743, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da6cd0cb-e936-483d-8bad-a5fd54a09252", "eventTime": "2018-04-16T11:55:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: VFD4SoDgG7hJ9JAlaH13YeMgfOgkb222_PQp2FC3CL2oW6aEYp_98TmhNKhsfRh6gRF2UBqaWOQi3YmvMROEksD1MmskhtKnpn0RLqPx_njSXFauWH_ALZv0NPZ7SO-gc9aZeic1BflyAeS2gja4CSza2O3D9V9DDt8jl0_OhpS43rHMdsrE5LNNkZcvHne03S2q61TvyoYavocQB4wKe-Yq9LH68iMgGqxMB74XKWnrvlRtuh0ERJ0XqWvmlyz9fHbc8gwvEc_-tDi_q62YiXcoY6fMYxKjDtJrN3p8KRtFRsJfYPykgEW3xtzt5_v95YvWeUSvAVB0QSvDnciRs0dPpkg4NNgYHI4qmz19fYzOjhb0vFyag2gw5-196mOJac0xOWYcF3uriX18s36ENv4pBzip-dIhDWsu_GO6zqVJSRPW1r1609kXQlhAkQ5RK9J0OK7U1DEr__DVIDhGACeMR4p-TYEjyVe15SV3_EGnyZcV3CpjrOfs7t42YLn2WZUjamqL2NwjmZmuG1gNK2AIlZElfCw3nmHLWgCcpD-LEZmjDi-57njM9ihj2Etz1VP8YlUU5DDCDPaLtxRKI-aG5rjl_XAm6cJakMXDn9WkomAsPpNGRIE7TS7yKlbOaE5pSDeTKS5plY2Uoc6WtuREhWvmxQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-b94cdf23", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1493a6b0-f7ce-4e01-8de6-0bd41ea77ddf", "record_id": "flaws_cloudtrail:0000524:1493a6b0-f7ce-4e01-8de6-0bd41ea77ddf", "row_index": 524, "timestamp": "2018-04-16T11:55:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1493a6b0-f7ce-4e01-8de6-0bd41ea77ddf", "eventTime": "2018-04-16T11:55:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7851b7e7-6a30-4481-805c-24f56835a68a", "record_id": "flaws_cloudtrail:0000525:7851b7e7-6a30-4481-805c-24f56835a68a", "row_index": 525, "timestamp": "2018-04-16T11:55:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1753, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7851b7e7-6a30-4481-805c-24f56835a68a", "eventTime": "2018-04-16T11:55:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: F_7a6cOSvchaNIbJhSAW4M_rcjvTYDX3kmXoHRUDAkB4ihWoVcZ34O1TUjSg55rVsiecS7DLCbyfKS59AdjsDz8TlpcxdH6BvHrfYrwGc29xC04qHODIeXfUCjy559bHY7q2FW9DogtIHJ-d98hLElJPcwFnVMvVDFkmKEfl51Kr7qlhZtF27C1fltyDOdjK6sKWyouXUg9ZWw-N4EljyU90Uzt4izuJb2yvlmxq6gh98GKg6Dric08igbGF6CTDB01tA2zBok8VVr1y4I41TaK7wiswwePnfDceKmZJsMcucopkQwS89r7opafZ5NqdeRSaQNPk996RUCpMCVHxshtBNLsPEqxRUbYmkX9ZfBDVH516Dp6ENlyEH5d-wHitepftXm0EJ6sJ0J_iu3T1-Oxdfqm0U_YLF4HrIJ8b9t-ug9mT_vkm2Y5CIoUFGvMLqx6yGwCFUwX63Gma1fWQ55L3AezwEY8j3t1AYpve5La4dJiQPj4o2UQhNvr6N8vr42o-Of4xOz0RCyfZV1tU457Cm6vvUEdNhxteXP02yYzSzxVyMFwbdUB6Pbrr5H6nUWNa_oS2l1YP4URU7m_wxqg9HD_OUpKo0zgXhEhR8rUd35Cj7x5F7A8Y6WjHLCvDiWIimrfFq5na65Lf3qdL0icN70mBtyuC32g", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80ec17b7-5f62-45f5-a72b-32950dc6e87e", "record_id": "flaws_cloudtrail:0000526:80ec17b7-5f62-45f5-a72b-32950dc6e87e", "row_index": 526, "timestamp": "2018-04-16T11:55:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1750, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80ec17b7-5f62-45f5-a72b-32950dc6e87e", "eventTime": "2018-04-16T11:55:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 3oo2d51Fe1z-EVilnUY4cSc7AysvoEq5JnTTWTMjET7rEeU6ZanHRdWLdgEyfUIzq3Is_cNy9kcQABxPPravJloAD09XqrU-7PeDlIgHTofbi6zqjNmkEsonYZiVndluVdBCd99FCEmh9YeIeg1qiRp4kcTuWaNB0nS4-Ewn9WEzI2ecK8rXE3qZaGCwDu1IHs73eH6v_SZdew-JKl352Z6GfAI8dczU4cqo6h1z9_ZvGBBAq2PU7gpZBT-fwxyfktjtEFWMmr6oX3PNLewHC4ZXqjmkqMIYh2PODmM8RXHaLWztTv4_FWjaFMsECV73m_9A_YL4tpSSwuHncLZ2ApbeOhtLbkVOCQodNAj6dtoninwDxfME0VSbCiaU8jn0mJDn7LH4hCXazSRrU24UVGdD174aWL-fT0oI7SvXyrqIeEOeSMmrOgsXEG_xb_L47_SBvm_WAi2zy6CUIWFcxuHA6CsjibuswIJS9TkkFocXrrh3pU5cNNBQTlElICtVZmRCZxdyl6EAsi-Ludb3nqvYMH0DWtC5vmv73o_UPTrG_N4-KO4GnjPd0fRABlvymOFiMBD2ODraQfQXmSKaTe_QPRVHznOYWj2WFSdBPEaZn1gCLFHYRFr_qMvU1FKUvb1_Zxq-VfUry4DmzRJ_msbhkDLws0CIQA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bce629a-5980-416a-8460-82a23bd1ab0b", "record_id": "flaws_cloudtrail:0000527:6bce629a-5980-416a-8460-82a23bd1ab0b", "row_index": 527, "timestamp": "2018-04-16T11:55:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1751, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bce629a-5980-416a-8460-82a23bd1ab0b", "eventTime": "2018-04-16T11:55:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 5aURhw0Ovs53vpv06PesAHdKYofHkZ6T3L_8X4OkbnoQhtyJw7IPcMMy5qHhLMO-5mAHbFksSVCtvksAxCCsHT1hsS9vhBrY7V8KxcMor4VnpPYAYEJ-aV_rLZKM5w_X8_KuIqW2tgjjjXUALIJuATnd1xZh26D0e_L_XOilVnMyFjm7nkgCGcfNLTjG1RCCO2KNBgN49diUJToaZmKpoiaFzhKq9bf_cYBvFa-7nPq6FkepWCUJDYEF5EK46Tfw3lFXlfJLWyw2DZ0saQYhFbwph5XhSu2LelzeuYYlcjVMpVUHOzDLJDYM3DoAAITnCl8z6eha8lujiSEBm6K5kEjJITlOTf9JfPdfRQQUEYYqiYE2g6CiyIv5-tnqV8u74ZFCBgZGXKE91ZY_4Xs7s9p429FMGPQ8hvRDINQmzyvkyIl7mBr8g0ykTxofv8WrMA-M8w_xX24WdKG7lEAnXX0fnVavampYsgU7co3d8-z2wVxfXlfaI2IxhoUIzb1c2yrRt5ZzICr5QDYoWIZG3XLRvX0TknwIuhTCKG4xlIXFNxCGiCJlMvsQog31GPvseCQkuRWBvx-5nTDQ6aC2xwxfKASPDT31ELj8nIX6z0dIIejYywhkt3CcL_sjYMM73Lis6fx3jQsIQb_5mKPDKfe6rwT_E97zFjU", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29591bc-ec2a-42b0-8e87-1e501890cb539", "record_id": "flaws_cloudtrail:0000528:29591bc-ec2a-42b0-8e87-1e501890cb539", "row_index": 528, "timestamp": "2018-04-16T11:55:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1750, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29591bc-ec2a-42b0-8e87-1e501890cb539", "eventTime": "2018-04-16T11:55:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: qi0J4JwfEYNisx7rHIvoSVKltjDCy_qbCnExsRXGp-ElkgpfTIphfshhsT40uQR9jwOXzfeKE5PnzFemZaI-guCGkQpE0-8L5NeLaO_WjvgEDldlKEOdsFOHAZgAtirTarGHKdlQNkemCLIJnzcY2QfpPeGQ7GZBcOIQyIL24_LaU_B_b0ZMdYcsI0IpCaZqVmUDhSlV1Nu15gjIqETGs_DW2cj8KWHFmr-WoukloUWg_19qcjfVOJCSFq6PNqYc-o-aCu4p1UxN1xTy2mRSIEhEG_jHS-o6u38asgIlZkvdbhdT-Qa-g9kYrQFj_qV86norMEXoxsEs7PQBr1R9ktrDejGm95TRDLm0We6RCb66DyEGbBc7iLj8k8FQqlF0Sr-KmfxTF0W3ITuX1UZQuyeY2T8k_JC-OWSUpmSdBVdwSy_6q00jzi1GH5On7uoNZPzLl5Y3u4Hgh8bNnf5pfDhJW7yUDDlHmMwDM1M1JJaEzMe8eUeeoBJk56fl1dxeVab2P08fL_7M8Jy1Hsc6D1zjQ2bo0Xm5Ipz26LlJQICebToGpSh7DYXyiw_e-Fua7VGZ89rsUxUs_UflHRpzBT_zobgXI22iwAB2h97imU89cTv5V2qTLV263eUDhGn3Jwon1iufLGL49hdjDyObo5rIS25yRF4Umg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e69dcfd-5b95-420d-a7d7-f9b7a7a479fe", "record_id": "flaws_cloudtrail:0000529:7e69dcfd-5b95-420d-a7d7-f9b7a7a479fe", "row_index": 529, "timestamp": "2018-04-16T11:55:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1750, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e69dcfd-5b95-420d-a7d7-f9b7a7a479fe", "eventTime": "2018-04-16T11:55:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: wpDC-hTq1GJPXSIKCXjFc22HGEZ64tAnXeGY26BZ8ACHqv1YH4UczT0SmQhI_qpfeBBLbw0lxYSLn-Zb6X5QdtUhlS50WT1L-Y7bdSdmwM3RSrmoXZmdDNqSnNwLG1EkaksN8pF89_8Egx7Nnvid37Y3IyqV2gp8vMWpxCcc6GySrDD9-8PIVlfXBerseSqvKTD3_uFeRlemio9XSsP-9hAzwTFEva_dmQouC8EnYenBVeF-FCxOrftCvWeBnh1otTI3AIy37nh1CLnLG-Vip6WA1T479JU0M3WNfTh-mlI_qy89oteyPcG3IgijtnRUkeixLeDevL7ScTNmG31jSPsP0UpzRRXX8YxA85HnbMf1aB-yFn6FkUAuXDUY128oBtMwTjVlVt0jmMr6EQJMFbtFF7p-h1qMapm4XZEvGnD6hDtlLmSGnKkvCLTURlu9rcwqmjaUgLBNtfXRi0sW_yosml6ISb9WwhW9R3dNGzVolmgqySJX2DlIdw267ea63dQA3H28dSCB57UZeT70YPInaEZx07dgy30p3YVbXkW59J9RyNC27ehtbM_L4K_2c0P5XmR95x97B4LFsRudO7uU_GtPgeT1M9PAGyTpY4wFDWuWmY2SHVfsHAQ8mICliY8QwPov2orI7c9LKCAEvJxqYe-TSIYS4A", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.12xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da04b920-5e28-49f8-b1eb-580c235b71a7", "record_id": "flaws_cloudtrail:0000530:da04b920-5e28-49f8-b1eb-580c235b71a7", "row_index": 530, "timestamp": "2018-04-16T11:55:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1751, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da04b920-5e28-49f8-b1eb-580c235b71a7", "eventTime": "2018-04-16T11:55:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: SuWMJmpBGTnt120qn44bnbRZM07LVx2GPIe1k8vj4_R87amPn8a01veZk2Yjv512V09MXBxWe744h_6gFowqQNdr1MYgFbXTvH2B87j6cwPpiF9-thay21sTYKeN6Yu30kaSeq1R8e5ZE7Alyy-xPwc65f8Y9ASRLksQ3iL7Uis7eXK0tcHD8T7ho99F1Gt9zv8k1qS817VnWlrKxUZT8KDHI4ayG-6Uy0RhCjHacsnsw1v4iH97-DQcK_sIe7fj18CEJwlsUNjGCBd5Y1mjoqf2TNfSvxJnFKDNe8OMPkwX2Y8ssx149AECzfwdiU74_Q3yodiBHYYBWQoXYOIHAdMAesR3-nI7Z_2ym8ZkBSS08M9EvL-EGYlEtf8TQsCf6ZkwmGpB7wrNoesuzV7KdNvbvnjqz2AF8LglmxhvArjc3Z-Yi3Wi7PGgdpUmRG52wbXykJz8qx4qW2zr6b0GH8ER9s9ixRjON9KN5J48JvQPOi5UyZ-zVRGAeqHLJwYM1hzMmENer4n1gWm4AwopYZ8TqtHUf4Jn8cpRVj0obX3mlRxG8V1QdAU8nDL29SKRhsrlUxYnp8oPMzIkJXyBxJUbC7_IBStGAswTovx3KHpk59BltGC8a4502o2jzJz2k5NdI194Mn3qHH3SWmjIM4l7SWlfh2zQfgQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.10xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edda6811-db5d-44c3-a60a-35d38c8fb4ea", "record_id": "flaws_cloudtrail:0000531:edda6811-db5d-44c3-a60a-35d38c8fb4ea", "row_index": 531, "timestamp": "2018-04-16T11:55:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edda6811-db5d-44c3-a60a-35d38c8fb4ea", "eventTime": "2018-04-16T11:55:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: XV4hqAiCZqziiGXyaF6s2csx78gKSDEI0KcrhTSZpPYgwX8M5WQyzaSPEHHY7FntGcqo3FZ_pLza0hTlGrZSgZ0mjCpiujE34ct1xOW3cpBfzAHv0DpVBmVckqiZB3yPM_MHMj6fa0dT9Z80OP4FXUhzpr8fy3dFLlN1833UpdiLVgeSLfyzR_IppyzaKpK141aPdN2f7NHQqH6CnXrCEV3zoHEOU1tPvx0_Ii9tRawQujJ6ZTZce8ILd45IYI0yOUO7q9QFHPcZAzm7mgvBxuSzN0qt0DH25EQ7O64-lExdw3sIiui3iZOMzznVmy5nfUxwWOdt_v1z8IJJ6_ARJLOu6MZX2PPvWWIltceu03qHXbxHvUhpZSqWlUy_ZK6fURGOpgJk-jCe09tSvFkmiJgAUhXASo0XAXZtLO9HYLFUTohF3ekxz664fENr-IeoyOClCdPhsiUkB_rRWrmKwlkqGOy2aUDDZa3WDGQp2bu4Dp5WpY90fy_Gc4Tlb2sTmYGMAKh4jrmJVUXKY4c0UoYORp-_iOvRXR5mExI-lWtZj6PR4IR9ThlB83K8UzC-KUlsDNeL3_WNkl_LYTFOMYk71eXkGXTJ907mj8WpG7Qgz0mCj-8giYmLFhxmKS0kPDOs8A6Bkz12yTYDvsynrjDTthdfqWDh", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.9xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "336caac6-c459-4304-a86c-b5ac0ced84af", "record_id": "flaws_cloudtrail:0000532:336caac6-c459-4304-a86c-b5ac0ced84af", "row_index": 532, "timestamp": "2018-04-16T11:56:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1750, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "336caac6-c459-4304-a86c-b5ac0ced84af", "eventTime": "2018-04-16T11:56:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 6_3J27X-O0fOmkguDbD9dL9dDWgYuFT6U0peF415uvyIdv0pMu4P1jFal1ut_Zr0kerLbPPNs3Hv5XWp_RyndBb7uNkNyLZpGDWULVuH0E8Gx5NStZe-vPZqO18_H-3vthNsPuvoKUw3uI57sUEnkv1KuFEKEK-g68Owv8lds6nuIbVcyhah28zUudklIPM61mKQQHQnzZujWu8bg4qJIJYEay9lvO9lo5T4QnYELcveyvlZLF28ZdhpXi8_GQoI8NNn5Uys_wqw1jCLILINraKe1rWcp2Yq-HVzOPrXfeTtn3CyuF310rM9LLuPT-1ZbHyarCiJGAKW9esIFZOvRr-Q2FvBwgNzSPMdWp57kU4TKYnEFn-yUkN4Ruw3dhhRZXCmzoZu1kC38gs8IBDOCDf5k0k3oeEZQxrGzXzjeJF_ANgiVVM43QCgOo07i24ll-57W04NE_Z-tZY1hvPYCrrcdAqKDf-brvUKgLTx_2Xw1rvx20gn4UDgN1tWPfo8zG5nh5L33AETOMeO5mdbJZfQvRpSUyd5BK_U4gvIaqc23ke-JtbwuG6Rzm77xDyNhumrpK21Gn92bQ9XQ8FNKCr0VH-t8ksYPVZXb1jOXJpFDLkkYs4XtLOiRndjnG4cKrvuQ8tFOuZ4JIihyybOWirljryjxn9nyg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c3c59cc-c391-4add-bd05-e4c101bddbda", "record_id": "flaws_cloudtrail:0000533:3c3c59cc-c391-4add-bd05-e4c101bddbda", "row_index": 533, "timestamp": "2018-04-16T11:56:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1750, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c3c59cc-c391-4add-bd05-e4c101bddbda", "eventTime": "2018-04-16T11:56:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GGZK8Y5f7hn0p0pEYG_sn3rmgc4o55E8Ho7EdzmFvn0mfQS0MUOjiwHDi7pzy0nPQZXb0rBrEOeLonFNylMi4vZqXgh4jN4DCBzt2qe1s_QObWNeBvaMkWjv8Xnzq4xBBQggdHnn1ktFl7Mnqlxt6IoxcaWzcltDA9RHqo8eHANPVEIR6n1fozB09qmNY6kCzMSjWSgBVcUTIZPe9to0leA07f1LAfOoceO6-mfciiA-QR3FAuFEH87J68OPR1VCd5sIyWbsRIOUza2dINprvX5NCI4-0FPfVA0ZBxlE8360YE5jokyKJLqJ5cqOmB8mIO9xf0zbUnadtcsTYMXr_mdc_XWy39X8lgyuYu-RD-KCgqesweH0hwqOblnJRuhMEG1dKE76OeMnckWwZb7KNv8AiLfevqEXn5UTVx1x7ccl64iqpVa1ufYJ_eXi2S7C-ldsEX4-SYq7eYhLHk7UeQuOYLeg8hB4j3mTNvx-QZsi1mO2FmAOtqcthPrcZ8_FUvzk1DjGBNuqx5ya4I-ZO-sCuBwBbYpbUN05UUZtprQvG6p2f39esX4TN-N3vSrTbX8AQ8hFO7ccQuZ59-G8GnHGoX6F8D2bS0fkqjvuVnkHlltmMTBXJToljRGeEcjbjUXB3Nu449KoAoLYVH7uPS9XAegiBIVpOQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab9cf170-0831-46ac-947c-d7b4a69b897c", "record_id": "flaws_cloudtrail:0000534:ab9cf170-0831-46ac-947c-d7b4a69b897c", "row_index": 534, "timestamp": "2018-04-16T11:56:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab9cf170-0831-46ac-947c-d7b4a69b897c", "eventTime": "2018-04-16T11:56:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: V0_PFqk-6HGu_Xnu6DkWcLOHgFXCONywIdXawD9dfYuHUNzxp9xT58KrbbLMlGL3k7dfCvc-jRzZZNWIeFhrUICCiMvZ_6YTmAu16vyjxoNAQz-ZCqDdhwY_UhF8PxRd_38avxbwSbIHr0bmun01AybtkSpwjBXknAgOJrHG46NmAD-Q8YU_Y9cmCUNfACe4sJEzO_uT8AG9716fjzHtsVBAdmIV_74WO6C6cewcG4Dr1DDNNlNmntYmJfn95rNex0bBj9gSYlFNwwQ4DMt6jyaR0hC8NBwLNN_3rDlQCjIDZGfe7R77xaQGEKlA2rNRlK3beW5XdOCxBVjF9XLWWRZVjRoWdLWYxm6pIO2_ki48N3rRDR3r7aqQPbFjYPNawqtTkHQa24L13_Zg5nhIFEaC-9wbt95QA6a-HUSDwLaH44xbk2mhCMikomqXX1GBfGw8hAYFnR_-ZxPnUJ8DGNeR1ND8s2G1X0GVWZPs7AdvlF8LLQMjg4_k67xDKD6X7Wflvls1GYWxD-UKXuHFNGGbhQ4n_A3i_FEUCx0nOjBww9JqmfiJ6rXUU1fJ73Q8c2VDZv5O2PQ7id17vqtADJI55CFXyxqrKvKL1hP1MhJ2Rjuf8sOR_EC9_aRnY4FtEQhDDfy9kzGU3pspL2VbnHMJEFHmYdpgQg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "227d6e0b-742a-4cfb-aaa0-13b3f50f9c68", "record_id": "flaws_cloudtrail:0000535:227d6e0b-742a-4cfb-aaa0-13b3f50f9c68", "row_index": 535, "timestamp": "2018-04-16T11:56:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "227d6e0b-742a-4cfb-aaa0-13b3f50f9c68", "eventTime": "2018-04-16T11:56:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: U-ZGEI2mJuaVo_dgxEIQ0bVlZ4jUWH1mB508acEYd0S4vqmdBQs962kqu0S1kH_l0zDAleRH67MJJqYFyBWrjSJFhSKlcrlfNZyRGd8R6R22HVMekyNqaICv976A5gPlFOUXiLTkOx5HJ7BAIxugkEEH33dWiYBDPRcJF49aRovRgGtSne2IbqhTNiY4fDyWFvJTdCsj-lmsL5dxqVijtei17dpVrMsWVshxHBo403K9bTBUN7WfE4CIYcYjfVjY8qg3ydSc7RvUnr-P7w4eYV2k46Cmc09iGEalmbhL6mCNPcdrm6vcRDu4Z5VWINBPQEot_eybQ5QFdj_Z9YsL37H-fLB1VG5cu_FUO_pgGQcO6ty81PEV8mH7_p8KCwwzvam-GEYsVVkdoGHjLkmTzXGFArfr21f3verVMpDHbXbBH_6ZfVxghWa_s6Anr1-SYyxhKt4c-psL1EPOJVF7iyDqyQOh-uUw0D0w5AOSUV0HUwMGADfwwJawwM_WJdhgPe2IVC6QMB6494v-PiYQckyiv926UptR7Aqk27ZO2irn5xzjcxegGX1G7FoYhk2BhDaRRvD2EJSR-bA6AtgLZahEiVLpXv3AFZffmaWUCktXCDQup7YPAXO2wLWPkQOsRfkRhfXBIilliy1qmDlBQbzCyBiQq9V4BA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f1d94c0-4fba-4ffc-922c-3569dcce3d28", "record_id": "flaws_cloudtrail:0000536:7f1d94c0-4fba-4ffc-922c-3569dcce3d28", "row_index": 536, "timestamp": "2018-04-16T11:56:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f1d94c0-4fba-4ffc-922c-3569dcce3d28", "eventTime": "2018-04-16T11:56:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Upyoalw1pHds3lMQUQkTufpAQD7kjL_WOjmhVkrhjZ3zu-hoafqATLCKLkuxXRp3z8YFQhG23D-8k9g_6I_2QEfyojgose5pnwBKhT3tQ-PJ52gLRx23g-4MIQy8Wb0ZwpKyI_v6WzqIho-QQEjtPUvi4fZusj-mhSHPFS8h4P2NcOPIMUD5LGmCkCoeEsyySl5snAXoRD-0OuwKAzgaXsbVeO9FgiUVMBAxeI8376klz844iClNCl16WCIrnJC9JkRnUzuhQTwu7R8l_1MW03wJSHYYkAgCadYmp-XQIexK2AKwZ9cajEQwIEZ3Ul8YR_Evkmi_I9ghEEgXF4MMsJiLfW4QE9WNx3aOAC_Z-ELOTQZha5yDMVJTIYw-nZlq8XWjjV_gxL4jZ3Pjux9pcegPKbK5-wGhTGrxzDZ5uXCIaR-8O5i9c1fXCVXLEdrRaLjPBIv7T02jD--WgW6lj8t6zOYVhzQXinIvT8HckRbJOt3XIk9uG5JrpDuqvMQ3xepRQNhx8efm1WCxJav36Ue0yCp0nkJ7edWMIODaTn8by4abhuvL7TnIGQhKj75nShgXCUaT2SZ3GE7uEVm-KMnZqHljMNfv0iqK_hMW2AV8uiqLZhRjYe09gCshOtCgIRSwZ9DrALnS7ewvOJl9Ho4DbivhZJIT", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5860efb-73e5-43ea-93fe-c00e7f30af7e", "record_id": "flaws_cloudtrail:0000537:f5860efb-73e5-43ea-93fe-c00e7f30af7e", "row_index": 537, "timestamp": "2018-04-16T11:56:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5860efb-73e5-43ea-93fe-c00e7f30af7e", "eventTime": "2018-04-16T11:56:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: oRH8aPl8ZXC71nH7lVJPYGPcHZqJqU1-6_H51r2bud2Zkhc_oN0CO-Q8M1LBIGlPgY2NIqHFiIccLw0WxHsr28eXXJCgrAABT4Ns_OJN6LVoOH8c21IiQ86XxvjMAFjr6kEOPSQwFJ7A9K19f2glU7sK9o32nDvM735vG7Sf_wX9NkwPrPlBsO-DdJLxSQOma5Rr32ILl_DQZHkIx2rL4Fn45Jojuy8qJfDD0LyE8v-Aop1sq4BddS8CWp818FSlc-Ny9nUxUmMVWQbHfK6qsgQ33ZcQzf3OpROnG7E3ZJqbt5Oh-kVmZzcV4SDrgMo0LOYlY0TD1rfUe3U0aezKb7LGOkHUK7VDZ0yxQylTQ8qTnqDYBxiDLUIGq0mQmUQPcFVyZMHtYKQpDir1QmtxoPu99uJm9iOGKxyMeU3NQpfqAC4wsnZGSEdxkYIhSoQ_iV3XGJpxyFqc64SXu_RIJcl4d5xqB44TZH3OCycytaBzsM9yAdSuSJKBL1BO1n71LZNn44R2Pi9HzLrEZ4IvEZgdchcWAoreRn0Qb25OJH14J_iMy53FiZ9hJcflFqr90rnzFrGMhPgKNE5UPEUAXmOwCTU6S8XT5r1rUJtayAolyTAMxs3_PbjfNrSerHaeU4VHF6OPBIFXSULdtVMQ6S62ErY74qFl", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a697d3cb-4f60-49f3-bd4d-db75ccfeaae7", "record_id": "flaws_cloudtrail:0000538:a697d3cb-4f60-49f3-bd4d-db75ccfeaae7", "row_index": 538, "timestamp": "2018-04-16T11:56:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a697d3cb-4f60-49f3-bd4d-db75ccfeaae7", "eventTime": "2018-04-16T11:56:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 5Y3hcxToFp2-YbehdVzjWcZIDYeY3FK7sp4cvtlcvBLVgG444Y4jv945I757lZG2Dh_s0DZZ0TFcA_MAV-tECJFKSiRBHdk-SUjfjfL_70k8OZ669jLJ4ikH5VbJAvJ-GXDG18XdU24mXRUF60GjPgTWWK8yT6viEfT73GzBTkXTaZ_4vh1jZOKbBHrOeR3ishYmQT_xOhztJ7M-uOGBzVVAtYvFAqGkNqceWnVnKM1ywb--zx8atK95a3FK1wiQ5dzVvK9bwEmCp4jkZu1EHExIbEk26zuadesDAJj2iWcPMur5SztTpcIuCiU6pJq2vY_WHDXhhMR-wvURvrJoz17o9Y9j-XTpzd0JBLzGChAzB0Jb7EqU_4EGM5qAiqlDIF8RAO3RPvCLI3J16-UEyR1tcxTf7D3KG9kly80Q5fR4xY7y5ctARavHetWKZO92aXxe_uDtYK7JAr78ci4pdNTrJQMX-2OTjvU5gmuBKMFz-c5cmi_eix4BlqGlh4OUjs-V6Q1qUpFBs5yMIedgitiOo2nEk5xg3VzDX6NzJZFkl2YU_IqTCgTqlOeM5vw4Vuz7ynqfKaSKCkqdP9l9qFUE6rPdZZg7TOGU4f0JTGbqvLbV0OCACRdPVFay7Ch8KvZqyYOu4lyoqes3jkajCqyPiuS33frCpQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "719082-05fd-4ed4-a21f-d34d76c7d347", "record_id": "flaws_cloudtrail:0000539:719082-05fd-4ed4-a21f-d34d76c7d347", "row_index": 539, "timestamp": "2018-04-16T11:56:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "719082-05fd-4ed4-a21f-d34d76c7d347", "eventTime": "2018-04-16T11:56:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: _7JtzKJxlhVF5-FrAZxntWE5zagzv3Ivu9VFnAOgaLvdhJA1VVqKhAthteiiloZ-r4cACP9iy6o0_zELTpIXy-NYxcEC6B01gzeGv81jizbo7R4fW1qqHKHJHPEfV5F900Um0QKidZXB6RTnAD-6kadM8WbDlygGgyovZsZkwuJ5WL_Xg8tg52HXy3ttipmW4l_jPIhRpxwiPrrPdcCmagXxsumi-UIfwZwjSp7z8072ONcR9DtxjRYsySt7hNLKTqlaYel3zXl7NroiyRoo665toB7Ki0xJdgGn4VQNFZj7M4Or5dhyRyD9zknQm--daeimkd35tBFA9YkG_R794A82muSavDxFgsQqVq6Lu6BEFTUz0GhHACgDPXqoiIcFpKKmpcwV2IZAmC-fiDziT7VKLCLOeko6mrA0I_CAOtjmXfa-SAo3xfNIYB5R18rE05fb_DNlo_i1CjoKR7D2XF0ggU9ymReLDGH42WodvkW1EHf8fikIxT-p0JBKVQ7ZspnKHrCNb01Ra4PUz2rILLPkaKDIc4OG7K_uFOIiFMjABjJ3mDYqU1z5qiIcRDdiAplDfOcWCS9XP9TcW-RX0NGRigye_64uLiHWDzFZf-vQ5tCjau4Ac9_JC-rTLPpo90O-LpSV8H3Wzj71JroSdR7jO8AIjdQbew", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e210b01e-c2b9-4668-aadd-7f410a4a8e62", "record_id": "flaws_cloudtrail:0000540:e210b01e-c2b9-4668-aadd-7f410a4a8e62", "row_index": 540, "timestamp": "2018-04-16T11:56:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e210b01e-c2b9-4668-aadd-7f410a4a8e62", "eventTime": "2018-04-16T11:56:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: aaLylqd_Rqjjnj4mmF9S0FJIekc8tkfFaggghVghR0tKDe_Ik41TDXNMUcC1dD4SkKfjvyO3P_hMDtKmad_jmOzOgBxc4x57efE2ypS0LlRqB--niraJON-IfrVYriCdTeYfVVtjX2vkJWKOND4_BfpC1OMMZ3JqB32mEVT7yj6-Z4SQmGCKiVBUgIiWOsumj7sqwZNH0ax9bK91UpuWn6RCXsBY3F6gA6XS6FZ9Li6bCQt8cAxIogfIJQNY9032pt_IbN8jsMSgrJOFgaIJd7W56-FkYNQ1u3LUSrxbi0YfynUjP9fLO2YJBQFvqktNVOJYsRTVVXzqmHApjXbI29IBqtw8EHXeK2TjES_MGeKO5yDuMpCPjKmhqkqpFwodowoj5jM3nwDci3EqWcEYoG7IojTrKIunfF5H8tS7FzRM5Dg5T4cKnmmXole3I0wLmgYomf3aVuF2qMaHfzsO6ljyxIXHwPz0AWQcsykeWfyVJXK9wJybxBBsDVFdnLLqejnEZdcpePMYVE5sNLMTN454cq3TPcJmiU6hwISyS8hNZzIAFMjzlqQBBvsX2aQSyqITgNgxCyhrKfms9UZ-H8b98m61TjRwQvA1YiK4_xJjNpZhemQEJrynAcADlYK3nLMZrXkGvSeaL8glTxbtqqOQaHs19lV9", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38e315eb-1016-4ebf-91b2-dcd789746a702", "record_id": "flaws_cloudtrail:0000541:38e315eb-1016-4ebf-91b2-dcd789746a702", "row_index": 541, "timestamp": "2018-04-16T11:56:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1750, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38e315eb-1016-4ebf-91b2-dcd789746a702", "eventTime": "2018-04-16T11:56:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 550DK2X050Yr7Sz7KIkQ6mnOV6y0Jtx1hsYuYB948YXVd5uDnHGHfvvHArmRJZgWhT2wkuPjfoYdoZpLOAuCp8a3XAxD6xG26Q6n1LL-hoil-dSEeUCyogzh_yX1DdDgAlQFKRoCqysRhlY8hBko1FrVeNONS4nnM-0Bg5CrPWkgJ_v1Q48SJ1OiIyV0FZZDJU81ZdmhJatAEQXYCKQBKjMfX9m3xMZlLRI9t0gtIW2u980ufkgzyZihUWS6x0s8iM1aoGjQKIIggYnMRcsbasOrPsNSeIZg59e2HwNpdxeANDYMZ1uA8BuESViC80nhiTkRr0TvI49MB1FGvxLp7KblbMB-FFhob3t-8mJP8O3nPAL37gksGGLgyzeWlsM4Rdpsr6EoSfybxQK_EDPPTr10xHeRZboXLTkZA-qoU0hahIZflu0UpofpF4VKzMQ54anPmhOA7Odf1cpw1ULquoeyCJxzadHfdizdyUSNS2G9v_FYXfLl9Frp-vX1WvY3u6lFBkf-BRSebDmA4WCIYTnqCjZdgVLMc9JGH-FYR7zR18RP0TqkWFCyqGv-A6C0lMHHjAUINe6CCgrHSwKXJkOcH4KgVEOCFY_2jk49ae-14ukiAzmWgiEcbNYu5u5c67Z_D8MoftHojih6fbqaf_nQLLCBXmBw9w", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8eef0385-6755-473f-93b5-6d9d462760a", "record_id": "flaws_cloudtrail:0000542:8eef0385-6755-473f-93b5-6d9d462760a", "row_index": 542, "timestamp": "2018-04-16T11:56:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8eef0385-6755-473f-93b5-6d9d462760a", "eventTime": "2018-04-16T11:56:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: iBXfvRkoYBZLFky3yHqCaW2tCEth-Q-Q-Gy4PmtUIyskIhLsaavruJ6miGfZ8SSv919ERteHAuOUatftJzXS0jEB33Zqj2ndEip44pIYOfAqNny37cSZmmivXLo1zpisYve5bMM08bTZr80AMyxHDQB_jhqWeGrxMgN-eLlcmuzGt8PAnc49-1600CBLlNl7sfEofLkfWP8V3oy9pslbBRJsRNSLbKHilzII2LWNJvU0pCm98JEB2uySi5wKK8cIkH4fIruKsosRgOSIahU2SnLxk2meE7UIc11HlmNdvzxkuglWGDU2r44a8vlWKtwpHHw4aYTZViykQ6xywq9lMN-McWthMozcjTQPXu1eeWuuA9GwViE4OuNGqZmKmgevRAo6C2PK_mrZ_hnyMZhXKExMWHr7pHH7P4cCnXK23oBI-a2os08uULp5skowfoaT2nzdsU7VKQ0Y4B8YlHy537wqyM91F66UYi9CtOd-zjjP3zusFe-BPOi1Iv9lMzr_mZV1x2ECUSb0S-UsLDBbIVBb5QBrxeQYkXFHl46lMUEtMHVl5zX4ZY5RsFmV092ZuwYvMCNz1To4I5JzTK2mKfCcupt1bk1xZAljXlwjhu9J53EL2MZ5d4FIkDr0V-QIdaaO9UEkqetdtDLi8oBkc0T8iML4pFLS", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be53a6b2-8a09-4a93-ab28-66a0a3bfb5b7", "record_id": "flaws_cloudtrail:0000543:be53a6b2-8a09-4a93-ab28-66a0a3bfb5b7", "row_index": 543, "timestamp": "2018-04-16T11:56:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be53a6b2-8a09-4a93-ab28-66a0a3bfb5b7", "eventTime": "2018-04-16T11:56:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 7SbNhE0r8Mj2sAD0HcdKBk2AAXBd3tSMKTTeA93CS6DNd-oK9l6Tr2DBDwvfraD16dgYiUyqgUY2ycJft0iiAZNbY1P07qOlxy0ApZCTCctMabOqoNDitN5QOh0U2lrDK6HwuAKL9Rx-pqSFR1OSvubLypQtrUTx6Y0uritte9Uw9t87_4wa4aNsTIEpJkoz8K14N1KoiwbSvT9Voyn1oIMB8fk7Bt9577XCWEcY5F7sVvtbHHU-toX5qrJMUoP3FrTNf6L8alDYJ9M2VXNwQaxm9eR62qHDv5HME5uOS-NeDrU8cjayAF8noSPMHXmQZsxMpbA8ZpKAIUftTbdYSQrkz5BFR7h0rmGjX6GShMHUz3iTllMGTcy1uuQFeKUEBYZsuuzIWBsm3cbPBTbpWiF5ApC994guMFI3jwrd5vkjIzxL7Xso7trlfcCCjzYpUrSzFpvDpANlCwH9bwiEBjlgLgqQn7QUeFLNnvS3Qg1YVnnEGxxGSh4KcJSDznixh-HQnvK6noglXNMuyplAdth63Ly_EnwgSeQox-BeyYKvbEV8M02CT36gZCf1_ZXUE08MBoWXLv-WPnj1CiHC1LDXNvHSry1jB_o2Z5ylnAzd46DF2_mmFM5bSKVZBaaBUGOzQyQKktEP7Zu3XshC7UAAZqjHufSL", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d9d254e-461e-448e-886e-fe35a026ec5c", "record_id": "flaws_cloudtrail:0000544:9d9d254e-461e-448e-886e-fe35a026ec5c", "row_index": 544, "timestamp": "2018-04-16T11:56:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1745, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d9d254e-461e-448e-886e-fe35a026ec5c", "eventTime": "2018-04-16T11:56:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 2jhVVzFYO8fNHVSNZZolZLwgcHVg1dZc32IHZPSU_M3gB0ExBvt1yMsplUR1hrUu55aPgVZAGMMFbUZ-B4c-WdAW5sT4vUGQWWs9mvo7wUgUE9InVJSPXgjcrK-lvfZKA4lDMb8E-y1IHmsxWlWPnOutaEmVEuOEz9eXzKCcxSf-DKr-ASIziIUEhcUsXmfVTg6ZhpeU6QFVkO81ZC-LRyW0ug5FJO9eBUvbQ6JJNIWNvr1mxAYlY9NPKnKZE0JowIj7RXmhFpP4lrSME2MNEEaIYpgSVnfFrTAPr7n3x4zuV1my1oGuBpi_Uq9ZEoev8r6-oVERnrVpjWblWm6zX4h59hOYATQonb1gMrqcswkNJxALXUgjd-JpYhMJ3LEvw7m5wjzKQHp_QdzWsWf9YST7bQc5VoXaGsIMoQzfbCcBWC_p6udLJHDDD9cG_e5XOhQakGEXPZC4B9Ohz4XFpPQJH1Q59RtAIgVYm80k4bt_EkYa80LMaqJ9efo8G3w0kVEUxD2feROTOFqFvYVXy15qeuusVbAfORGsPbPutRS_rmJKz6TomDf0e0thWrsNg7tG3Ktf4jAKVlTpYtEaXVDQYuP70qlItZ7neSrm99DLZu3TqOXMqm8znJkyEglVyFD7gw-f5Ejd8Vw3Xa9Qwy1nL3FCicxN", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f761a620-d290-47c0-b259-93efb009b152", "record_id": "flaws_cloudtrail:0000545:f761a620-d290-47c0-b259-93efb009b152", "row_index": 545, "timestamp": "2018-04-16T11:56:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f761a620-d290-47c0-b259-93efb009b152", "eventTime": "2018-04-16T11:56:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: _i3lrDeoM_jjwn3JZomMJBBdkNHduSqRQyiT2ZsLcScIJHyksy-1gHQ42EoovhME5VMbj-iQri-wa5AdchKa0s7jYSogHN74cf2JADnerUzHicQvC2QCoI7Y99Ykup3tTYawegRT8wKMdxzogU7-8z1JSyDugwct52Pnx96_gHX4-1KMXykBDMzAobWlaR3rHfYQCepjfH9tG39J0nzl8m5w01A_tIX3QxgLZ0VTNo2GRIJSqSTy5gwJNH-POkoGVUXt3VoKfOpNuV16kDM5fLYuGCOVLZZ-CRIjZ-QB4uvTCEv4wEHLiWmxNxy6eBl_wCh6gUpUf5pEsFTP7JwO6Pv9ZYgvLtBvrg2U9GDyX-Ciace88astueVrnUBrA4pyaXS2THrY8XvoFx_lhZL_qB3BANjH0_UkAXaFkIwbHnTWZnZc9qEKWW8TLpwLpKEeiLdgrSUm7E8sBkP8X6OfnQNiETWJcGskvJpcdeOLu3J8NddQJHUszv_vzpwIyuTaF-667mdULa0Vbk8MnAwsoBHyvxUGC5bEeJz9IYDKHiS4UVEu3tjMp4YOKNyzXsQN0Ii9I-3TQJGUTiSeo4fBp1s3KH3nqF7MvBHX1KfrU03xvWhJ_3dZ2Zb-kpEmZc71E9Mpdzsvddoo8vQAR7SkV10i0VkFL8XQWw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdbb227e-f2c0-4f1c-9bf7-fa6bc79973", "record_id": "flaws_cloudtrail:0000546:fdbb227e-f2c0-4f1c-9bf7-fa6bc79973", "row_index": 546, "timestamp": "2018-04-16T11:56:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdbb227e-f2c0-4f1c-9bf7-fa6bc79973", "eventTime": "2018-04-16T11:56:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: JDnD7c3IkUPkJRGJ9UtDjIJQJio6AOjeV99zzzM9lAaunSZz_0zXvGofve4PADYA5J66aKgLKWTR1E8jUndiTI2fyW6ere6uXNlxkQV6TXeXHuq7fahDvVdkyVlxCKvFZbcEL3nsKX3xNTLJVQ1nQdcDL-74TJbW8PHg1aMMGMk4d69ZXs2jW2-xsT57-DsytGB2BypTmKe0-9TXfTE5Pwz3Ev0nEcx64RkQvpXnyuyAE5LbkZXr9kjV_ldanirK2Uk8uGjTYcUcuMRcyIBqUQvc7lzPuIzAFgcnGBiXwyYlt1c0SfwMo2BhtVyQHD7TGP04WMSBmjk0Ew6EREc2t8529am8kwUF-IjmyvVAW80qqMZJQ0AoiIMXiMqkC1q8t5MTxoag11hxYo6mFXPFUw8ihhxi8f4yyj9zX8GkvXsUiV0V94Hg2f89c1hyBr1iEyhf82ztTVh4-GjnpgRjsUI9tCi8w9yNpdsVvAhqJEjtpV1IWqaupHElsCdsEUYXj0CYSHhTso7AUZgMUsNyuDG4BzINwh7DgNfYStR9M4kuugkUNQpzJC_792jK-yVNpWrjB9N0-ELo6v7TLkt3gfx2mQRAf8nxrB--3pesDVlc1jyU0HFGPEloySLNopFlR2lPs6bnLtGZ-OjPtL5QFblL673aUNFk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19f8eff7-42aa-4634-a831-a89be914289f5", "record_id": "flaws_cloudtrail:0000547:19f8eff7-42aa-4634-a831-a89be914289f5", "row_index": 547, "timestamp": "2018-04-16T11:56:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19f8eff7-42aa-4634-a831-a89be914289f5", "eventTime": "2018-04-16T11:56:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: G7msC5UqQJIp23m5kewneky2-MGlOsQboAeAexJQKvb-GC6AkNTAeqRTerdsduVzC3bHzEWcXNZeIDhyVsLG9_XZn0U8IaKR-jw7STdKT4ldSLlkSWVW_y0KX4AiOXCj_liEjIONGn8PzuGOsf93A3zU3vSLZVx_u2O-cEJoFol-oB9N1WZbWSkaZ5PyHdI5mN8slYfhCjs_U37agj2fohBsF21OumJ9ek7tmHm7m6x4YZyBB9pbRBlMBfSh6L-SecZfdHsFLIZHzxmtRT03dHTzHGbM4Piz6F9PO8W6HrTCu3RcE4RmJHVBmWlJOsYZdbFclCZKDeyHkWschqIMXaGIh0IKMxH1GbMjW4cwWGv0VMV22uWwMcGS6COSXww_GgpmzX7Ww3ywRlbKC3pb5Kn355OIeuYBNZwcm7w3t2NyEG4j4cfAk56RC90UOx4djbxSYwehaQ06nU7qK2XDPGQnV2SnEibcAZbAvLk0enRv7jn3crbj4lB36_CGeR-aFdjiLxM0BJdMuFY1jOfXpNiGcgtvkadS_I2ZK2PTDxY43glFG7gOuReipkc4UXHjuBNGKu_Vhs--_O0PXlvQFvKpR8wNwFbVrGkEptI6BegLC_YF9F-hFsOU97Uvkm42s_vLj7ToPo9BUiBsB3xAOmC_c8fOcqXL", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be9a8974-feef-45b9-98a3-282ff18f400b", "record_id": "flaws_cloudtrail:0000548:be9a8974-feef-45b9-98a3-282ff18f400b", "row_index": 548, "timestamp": "2018-04-16T11:56:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be9a8974-feef-45b9-98a3-282ff18f400b", "eventTime": "2018-04-16T11:56:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 1KVfwt969pGebytOWfUojAVvuYlcn837rrO97JMJJtqCK2dj2n7478LBzyyUDn_OyTlHKwmananIbpzzfwQWPog36rmcFyZiJYhLsCvN_QnP_pVGSqyxlJK-i1IyDCwYiTd7orzFrMx2pO85PARuUHT2NbBuhEHIolWkYF0kGIiImlNgTvW7mNKdce3qoUqCCD49lGoWlAVDBAVQUbuuAxTU4jvYGHDkA3U4ZG7YFp6RMFjGY2HHNFbZDGAEogkdmIfRhzs1KEXehkdliZbp--anYzV7ACb8DHgBninUph-AsBHuiv9r5v0-4KMpaCsPECfncw1qWEVJyVH8XeXAh6CENGWGQGjifvfOR6LJUVjw7BZ356MQUxaNqQnNuthHMEFxlaCUG0Ndu0zwlXOJ6ukmrKjTu9ofPTGT4Qw7n9XcaHqFHbRFZXoUwbgpKwJua5K7ocmji8QwZ0GbARpi2P2FsQzUE4gGBnZkDgMelzWgdRhPjUg7oRs6U04nIwxgnY8Qns4UIobeJfQ5iC8_TK3K8i3mfStjjDbVQMBbTecSHHmCHDOcga8sHKuMs1pkzT9rmv9WHST_2qIGAmYe614wfsRHD1STn2ygnEi2nkk2GcCG703PBeRww5x7XBQZOGjiQtDFW10fpRsXzsaf9RvB4KXG2kmS", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a69b0c7c-eeb6-4c19-a1c9-9ed5819d640d", "record_id": "flaws_cloudtrail:0000549:a69b0c7c-eeb6-4c19-a1c9-9ed5819d640d", "row_index": 549, "timestamp": "2018-04-16T11:56:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a69b0c7c-eeb6-4c19-a1c9-9ed5819d640d", "eventTime": "2018-04-16T11:56:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GLds46Hm3MygR1qxB8QVvynwPJxjGF8x1PCaYIjz7lN66Rxd6l81grUal8vbagIZ2Y5ePI6UntYsqrzVV70zJWb3dPKVgHe3MwXH0QE06sdZkWAMFomIMI_EbPNtb-kv8zD1mmj_A07tddHU9t5YTDF-oJLTJnehntEsYM-KMarSQB2XxqZmwSgGISIWtO-nAlCIhlcTJx8PAeGJ1eE9j7K8n32aR2daTIw1Y5bf0X-jew-NOcE_RRFsO5K2s2yZjRce_0veHZ-QFTIJzJni19zkiXw6UC3SxI33aIi6vHVNt6PY3K4BN5hLizZNUnCRxiZYrPptO1UOFIEbKYvv-twqfXFdFf_Q5QQf-PUfYBXKP_GcVMOFJEu1vh7aJUYjorl0eOo4MrKsjwEGhPWyjhrNlH3IBvW560sIhPVFTaWnA_K6Gb_9vuENNjacWMx65clEuEfZVPu2k--zZQ20bXdZ_rHPZmR7kyB5HyjZo85R068btmp2RFaJRTGzyIqVNJ_gMdUxHxqfrDCeDCTfL4TQG8qcKzuYV7KGkjZxbjeElKrXzKSAtbAYm3L3HAC18lInBUD5SMmXTnKJGH9HbnglMLcH8vSw9_WA2EyMbE8qJyUIiIDSvspQIyyMbCaYezYn7dxfFh35ZGGpHJ2K-Y67dP3JaaxK", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96323-d09d-4afa-bff1-59734b788836", "record_id": "flaws_cloudtrail:0000550:96323-d09d-4afa-bff1-59734b788836", "row_index": 550, "timestamp": "2018-04-16T11:56:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1743, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96323-d09d-4afa-bff1-59734b788836", "eventTime": "2018-04-16T11:56:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: krJaBN7hVe-XS5Rv5Z76sOh4sjb0ub2Vo163AB1XlvzDMVNinxjv8524gtWIl2-tACmxIJMgjiYjAloACC-8dggYKlmS_2f2GOkyfhIrADErtJWIe42NN2jJjgofnEokrkb6qgvEb2fZgl0Pu3UMxmSIEdNMFrzd16yqKSNm9IbKamlIEKv0PdzIitJEcmbwhuKNZ4iN3Fb-VG91vExNGOy9uQXBq3NV9vE5ACYEkHmego5EkAvaDa0fCHxEA_080VrcECJBSS26NDbDoYLjmRBaHVNw6XZZ-NiUYprumDoj-8CyC3YdFEEkt0nYAEt9PdVrPqdlPX2hTGmunboHB4wmjOij_hEzd5uyvJgFKZ2F_EWfOnQiV8mZdiXCKNgJi1PqL1D4N5cEFLodQrQfwkXF56Tr385a2iJD9rxNTX7BpvZo6VbAv4Chb4Tnov3B9w_oF_CefgdBJBDoP4XPibU03bsVcDlvuKcb1cadZxnnfila7yQe24nYYsvHgI8hdQ95lw-vd_kw3o2JVeraGpPKsyQjM3TOUVDMxeXpuT133J1a7trowA1J4J8VtyFFbUPEAVq4EVk_LdvZGcWaUyv9As8_6TD44GvMbIYZjCkhn_TGV_SEX7UL1zCvTvkCsWRu3t6kybPUnjECxKYrezLkGrYSNsw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f9fc65b-37f4-407f-a9da-7d579d032ccc", "record_id": "flaws_cloudtrail:0000551:2f9fc65b-37f4-407f-a9da-7d579d032ccc", "row_index": 551, "timestamp": "2018-04-16T11:56:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f9fc65b-37f4-407f-a9da-7d579d032ccc", "eventTime": "2018-04-16T11:56:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: aDNP_SO1aKboexVI9W2Gaxx3IR1-BKqmkGj5FFMt4DQoknfwzPDHT6rcSGR-hZi9aq-3T8cSJlASOqmk3dLVtn4rqtpOdcOFXVa1w-w579LKSEtKWFDe9nB7uyNplwZMHPBhvfYsZKw_el6mEr7QDqlLSWhLJH6gKJlGHMkG-Gb9CERQUKptlx2X_GoLtniGiZPGcmN3T1v3dz7T1-mGJiMQKNB1Sdf9tRwPFdN-Yvd2BM85WFIm5FQnHmz01rJubeti3fExE86s6-y5LcdhlAbNYK3yYaxcEnj9o6ZUN7Nz9p14Tk02-a6UA6D8xalOMwfD_ehPhIaLSuKhqGx09NuyVBkEIShyYveDyTW5gWk7FA9-zx5lBTQeEcQRb_Q5a5x4bATupIpS-D3U1ycHiaCCnnw6n2oY-9g1tytkbF05I2Kqb0xR06t9smzxJ5O81l29C3__ODCe9w72wTjdOfu9DfAwHRU4s5Y2IuxHXh_4ULF2XCVcNxAqqaVbZXF65tv3aFthy8pWIgZ4UCeXIutwOnOUqz_0pYHN7HWCa18qGa3IQ_p96Z1Km0OLwJyY806UogfIFPhxa8_1WNUpf89hN_iqJa1EQKvDDfg0tlz9BvMb4rAiAsXlF6dqT1B_e-O1x8iQWj1AwEoeVInn56kk37rKc9M", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2db691b-831b-4a3e-911f-ade6cf58dabf", "record_id": "flaws_cloudtrail:0000552:a2db691b-831b-4a3e-911f-ade6cf58dabf", "row_index": 552, "timestamp": "2018-04-16T11:56:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1745, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2db691b-831b-4a3e-911f-ade6cf58dabf", "eventTime": "2018-04-16T11:56:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: YBsCkP0i04zYdH9tmsSmaKuW1UGXgRusHRkuCan6BGfW1QC4dwv_66Pvs8aB9v_WKwhBqEneGEzI66FNIhOgZoqFkz0pemhJXY8MBYxJYOyACWSy6wjCdlMaiL9ePcHJUhvf9jx76Uuy7DPorhRBgNQKf0dNd_22EyQi3ti60q5dWZ1M3axCrJFw0WIpbZAVLL9gdAhDLlx5ZHjQiSnSpVFmEwqoyndpsrNa34QZ86iEVl_PDH7oT-GOvKiiVbEKo3-sdm3Yr7tnGuhNk3WUTn-l1-JNd_hDaLEsjXPtIKMz-Ybfa19xY9Re8SMSRfSvAHxHn6VckJj3WlHsoP-uSKHBhoDWn5SACBERUjqXCUvtG5ijBHNBR_qNsEMY7HIqNKitqsqQZY4SbE0Hn4jOhjUMODXAP1clfFsI3UYLdD5lqOmVSXk3QpT47SZr_I1C3rbEXfjdYe6XnAX7WCxx3tQ7v0GWwUU8UIk58RQyHZnxXnnGaxqH0l0_Aiv1_QBeRJ8MX1xgCR1ftKXsxuhgt9-JVqpB6vqivUPzP1ZjrahmqD4bTxRboraqOC9YJV5JIDbY3M49iq0kVRL8e_e2lYCqxA6IP9z1v9lDV76YPI0EDZZkMHdwxcoFbAFi7Xq-MGabENuFwKfFxOp_eSxNHBjsQ5HFZ5s8", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84fd02b4-aeb8-4276-8f7b-0285a6c30ea0", "record_id": "flaws_cloudtrail:0000553:84fd02b4-aeb8-4276-8f7b-0285a6c30ea0", "row_index": 553, "timestamp": "2018-04-16T11:56:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84fd02b4-aeb8-4276-8f7b-0285a6c30ea0", "eventTime": "2018-04-16T11:56:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 1bv1MOY--noAR6qJFnqYKTrJPKQel5wkxdt3jsPeFg_OVA3eXx3pt4YnFG9eX2pDA0IlRW8c1GeJXdNGicbsRnkGT2XePXnX4pO4AwBJcHmyQyxcuXjdobyJlm1KvNzSee9xCyE-UpPo5ovEfyea97OgfXGfau9DF5vmEQk9NVljIK0vJEf41nq7qxZ7CG3NX8GZF54ZKsRSW-c9KL0II7ak0Po5rpAWUAB2TTkpJUs6LAz3SjKdn8E5DkAUZAdJxuaqoHkUcUFonzIeWFuDKBgFRoAVfL_radU0T7WTSSardPxcwAnlKJXTrhXYNoeKPJeREVz-DiPeR_T-3ENBthIrE-yx4mPlGhsrlCijrtgSvA6VO2hjk07Cceu9-4xP8sWyigJuqShT6w5TClPNpYfq9as8gi5-gNhkDIpjM2wWBr8wUZH3GxaNuo_5fc8hgP0qSeZSaatgkQPUb6VkLNUfqc2qyruSiq0kSp_eOMNZpH3jF9CXIJZUTYMdeLSX3-adfnZprMe9LPfYzKor8MsHKqC3ubqvDtQIFmX4FQXiuTfg-O0wjspa2lG3Nk2UcxwsWeiSejGjokdjlGq-hExx1IqlOsNWPR7PT8xr3ZxIvIW4P7x9SmehAraL9FAkwwiOI3NhYMhZqeGmhbBogNmI6aQNE1Q", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a18372b-ce41-4507-ae08-cad477dc3dbc", "record_id": "flaws_cloudtrail:0000554:7a18372b-ce41-4507-ae08-cad477dc3dbc", "row_index": 554, "timestamp": "2018-04-16T11:56:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a18372b-ce41-4507-ae08-cad477dc3dbc", "eventTime": "2018-04-16T11:56:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: MZWlVi69qDNrmB5daGbDypiuxBOA08hh-jlS99RMH_Th95XS-aH9pcx1prtsW9NAFqxuh6QVnLHuoqzHB2PARfEXJwK8T3Zl2-aDq9eBY37QRftjxYfVniNxmw_msSl0Fz_018YyqS3pNyAatIuoW5j0Pb-_mmd93pUI8ClDHljsanEb3c1uaMvV0cQfhCXqxLaoHwJX0ElIZlRyxVrwDOId7OtTHvynG2E9VzGzbVOFt97NHT02PCXxoBsgnxc1YQiwyiYkcyfVX-om9P1p4cMTPDAnTCpwDspDgR7aSNcjWx205y2VYankPOS2SD2i8fHqtSuV_hAyjNLFWtuTlvkXEt1n_tBe71Q3Jaz0eh4YIEmLJR8Sjy4OHROSQYUtIOSTKhLBFVwa25cras18RC7QVhJwjFY494yS2PxdZS1qSbfZ7WIqL5RPciIbdQvK2IvNOaxOTBgJyu6N1BzBSSupX--qLlI0BedXiRwxEAS8ecOXr6S5PpW3LmT1u39RFg6pTXEDFYPfmjMvAM5NE30twZPPTy9XFS8CaRy63xr0LFYIR5cu6VdibTtociRYpjc7G5CZlEG4U4ouGoci2jxWNNP42Th2y-thKTM3Mxs4ZydwxLp7QNvfD6EgWub4pOSscB0hbSBDoTQgvR1gXLnOEw-pp8A", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "268fb465-f92f-4d8e-8ef6-4e6253c80f78", "record_id": "flaws_cloudtrail:0000555:268fb465-f92f-4d8e-8ef6-4e6253c80f78", "row_index": 555, "timestamp": "2018-04-16T11:56:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1742, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "268fb465-f92f-4d8e-8ef6-4e6253c80f78", "eventTime": "2018-04-16T11:56:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: E86xIyl_84d90pOsSorgvwPFNVXWEUiG3oI_deUQaSaCKn8zpH2CmOiyGEqzxElkKHcYAazITDWmzYelSVphlRyntIAilp6DUbzElT4_vaW82bUI6Vo5FwKdcsCrYb2DbqfqwW4Tu_goB34D8LMiJWwYiIRJx5o05dXXDJ5U9-tKpnmAmSgvvmJ3tZpbCXJJTpbbax1JP2KQiT40EeR2QMktdRjauywWBY8oD87QS7q47iHxR-uf-LgrhkYhrN_DO7_4NfTsOK0hTzFqpcnyFWtYmzETQ2-chmSS7fX9BoRSTFVKZVaqHiupm9-WFw71aUBZof7myeZDCw3NCcf0LX0qKuyQ-CbS2C8pGxUqPG-zjZmIHyzVxe4x6VjLkz7a2TmhaRmoQwx4na7PghZ_0rkwPcgtNtLIcL81MNvGDMScYfyf7HRJ7ujPtLSeLwgPEK7SJr3D-DsTJPYzmTcBWJwBzrgNJjrsNWJYaa94f4AIAYeTPh-fVUTDX9LAXPA5-o8vNqQzaH_E8M31mcphRw6CSD6o8VnS2fnaQnJE4fwL6icWxnk-D8GO0vaZQFAE8RZIrH96fTul_RFQUGsv1ettTzLTogLLzDuk6UgU27BN_MLNrNCK4Y5Ve1dI96VOcu_17LFydvneneJgpWbUXFIKpk-z6Ew", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-9a5b322d", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "963b2d0d-6e5d-477f-bb49-b3ba8f69d59f", "record_id": "flaws_cloudtrail:0000556:963b2d0d-6e5d-477f-bb49-b3ba8f69d59f", "row_index": 556, "timestamp": "2018-04-16T11:56:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1750, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "963b2d0d-6e5d-477f-bb49-b3ba8f69d59f", "eventTime": "2018-04-16T11:56:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 8vd6lSdlALuW-JoMm6_YIsPBHnKSn-TVc9ohrBcKcb69QGiXbP67r4CTAGbLchTdBkBvz7F2kLQNSOMPynw5-rYNj8PKk9WbQFfXWB2Dc0h_rXJmtPXkOH5yU4Y4uEEB3Z8Q22ACz4OmBZImvqUz5uatMCQmonqgtXfyJcp_EWChI9AefxflQ0Qe4yzSvYkBIeFEH80DMqgu4nQdl1_7LSu3Rm35tBmbJEvZH0z9D3D6nnuKi29XNen-YzRc1-SPg8BUkD2vzqW_juOSy1k3FWiMzqIJS3jCvAyq4UFnu8SEskoM6VtNsMG9w0Auk_rQ0_AzfQ2Asky34wavUWbQYkUfJNuYS8IKwpXOdpbtQ_R3nFkx61KMc3Q-KaYRQpSJCMaxuwMgKTRGO21ZkhmJ_DQyABAqkqMFXWD-PKzhFeldZMTFepJe3yL_SZWcsZlr-9gLyWHZHqb3TUryAj7rCnS5tpRHMlqh_Zn1F26CvdEo99xfVgVgsCS_0TX4I_eeREL2MXe-NbTK2FBOJHbQEeK7q4WhcEcBQYwHVuEEfJbVbkaM2FDxgLEoHKvm23OyCSC0nMeVxrd3HpMJl62ufgKp29SsbKQxQ_Dhme1k5ubTi78CYkQ8CckxuDxvjvWlpexb--DvObI6BTWXRXIpnSBSryu7ZpiFiw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1add9df-3752-4bfb-92b2-a208193cbb338", "record_id": "flaws_cloudtrail:0000557:b1add9df-3752-4bfb-92b2-a208193cbb338", "row_index": 557, "timestamp": "2018-04-16T11:56:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1add9df-3752-4bfb-92b2-a208193cbb338", "eventTime": "2018-04-16T11:56:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b225fd57-3a36-4a00-8e9c-eae7ee7e5d82", "record_id": "flaws_cloudtrail:0000558:b225fd57-3a36-4a00-8e9c-eae7ee7e5d82", "row_index": 558, "timestamp": "2018-04-16T11:56:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1751, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b225fd57-3a36-4a00-8e9c-eae7ee7e5d82", "eventTime": "2018-04-16T11:56:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: oOpDAmj8kGyd2KFjYws_Ugk6xtElEThTUY1C_-XWq0-PPM3D6su4oaDoWU7rDe2_DCFuw1-Ek_LfraRagkW2sKI3KwZGhICNvZPoUOXBOD44d8WlTmd7dGhHb4sj42b1iBI1wkAQpRNVhP8YIbl4YiLwnpcqxQMDPFdF3gdxWTk21FdNqqsrIi-Alw-K3mwvKNFhT07R0ILHw5gTIyyZWtf_EKVOz1BKQVNl3rrJln7abpgcYHCF-mTPo2Yh8OE43JKwXFlWeGz06IA0uEKtmTlo2yKKpfj2NWFXxCxZnk1Y3CldlhTCDeqlydHRvMG9fYtYlQ_n9cS35evXLwvDrQidxbAdoECX-X84xgGna5RvJ9jZcRl0rBKqyHa6wsI4OmLD2e_VL-k5-kW_vKO5I0NIU6mLMFiFb7LCEH6gd12dTMwVqpN_OPxUXCgK5pt7SRqgDPu7VnlB7WqTzvj0IEhJzDZhMoTr40KHlRgYzArp0i8xUSNT-ZThN1KZnoLwT3BwCxFeKl4UJHGNquGDJHtQPeOMRbXQmpief_FCXHfQp-kl1fe0WNb8_3vxRdLu2_jF-3rxRc72JmqT1TikShOBgY6eVghoCgV5jlLlJhUZT11167kdpNl1JLe0sT1m6qJX_ojAAKc70UGAY2gEJV7RgxLuCprp-vc", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fb10008-2363-446f-b1a2-1e7fc540a1eb", "record_id": "flaws_cloudtrail:0000559:8fb10008-2363-446f-b1a2-1e7fc540a1eb", "row_index": 559, "timestamp": "2018-04-16T11:56:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1751, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fb10008-2363-446f-b1a2-1e7fc540a1eb", "eventTime": "2018-04-16T11:56:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: gVsw4qdn4BEP3QizTEfuoYRn70jA2gEPl6KXl_ivQp4YrbNOroQqJmYHRHrF35Q2-VDhFKDvjEwY04S_K5auwu7-54oO6_s9LilkdDtWjyeitCkA3OR1v0ftoyOeVw91-5XHteVl5V0Qu7fKk3sFTtEv5eh23pGZPZMdLvTK5pyramczoZqZibD-mavBfLRe39hDnBBoZotN4BKX31XHBw_EZygjAxzXpIV0GGlGQRdAE1UPgDN14_oHyKLMtwRSWsoAoI2j9i--teYQF4vBXmz6Z-79CN5G9tjkXEUgkcPgBgHYN7Xr0-qBR5HXuatzqyE-fJjnJTc7KYc6MdmSdiYe4xWTGbk_lyMwezrxnDTZNERrZwiXgReIpYx51FpFvGOWqPnbq9khWZu_AelwuT8dePM-GqqjYOxn5C-oBcX1OGagUTn9mPMp3PKDO1DDskEYsLFKKqAAKQUIJGW8sbhcyTOmmiH9dMbY690obwRL5xcr6Bn0Y_K3xUkU5uSomglM5Q9d9NFdeDVSkE_Wyb-s4--8qkH5mEmydKsbkPebd_TuFTvBpLBkxg3w1Ur0iy6VYgf-J-YQ6YW1qi6nVPn_-CJLxs8WvclW-MDwf6bczmjPj1bgUpawQXi-aQBnjf1VnqTv_lYjM2DLHUSGfzy2yjwBEGxAoVY", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7256cfd3-3630-4ead-8145-475474f35ce7", "record_id": "flaws_cloudtrail:0000560:7256cfd3-3630-4ead-8145-475474f35ce7", "row_index": 560, "timestamp": "2018-04-16T11:56:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1748, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7256cfd3-3630-4ead-8145-475474f35ce7", "eventTime": "2018-04-16T11:56:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: WlssD8wuStLMLuik12hIYkIIjc7H_kxVG8pICmAtEo7FK5Wo_Wcv4N2blQfADUKMDStFuqlQx0Kcx46xrLAvizTjXc1XqnXthDBT3OiL9EN4udyLLoNtrnTCDophkFto6EN9mUsmC_wqzpQOwuuHnGHwl2-zfOG5-63DehmPIL18o4oGl3Zj0f-kUgMgIS_WS_cscBlWKhj41qgihApeqvx1jukw3Q_UmrL7ushawRtuYDGaEx5kUhCxbqJuxFG70Y3syXs7hbnmWM7txDMOtwDD5smGBaWHmSZqgRMWMUvVcbGSoVUWhvyGGsRwnFllCxxWMV16ua5-X-xSF_zG00zwFahIOYyajJ7RYaeECAe0mxxcuyzOmqtIZXhb5U8Ks7k1g-W8QFz4maM5gj5JZvDb5DuK5aDKhLQF4pkhrga9Y6ksQdNlztiyirDse7FcGWw5y8XsUp9aQHEg_RQQDCviXiFYMpn8envZk4KEkRr0X8TlRvcQDmsPBUyM6IzzgpI8S5mnD3OIJKAns_KAqGzpSi-dJmyCCPtu5RFnMCP_xFN3k6KJs704bny8RRDCQPrk2oA9aUtuvIxKQ6dgN0C1gUpne00LfoWzBJnlP9CGCopr9w7FGIWoavaFJaQPzJwZqIc5VpR3inrCEHkFGVfHjYP97Rsz", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dee085b6-09f7-4d15-9a96-d6a479806c0b8", "record_id": "flaws_cloudtrail:0000561:dee085b6-09f7-4d15-9a96-d6a479806c0b8", "row_index": 561, "timestamp": "2018-04-16T11:56:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dee085b6-09f7-4d15-9a96-d6a479806c0b8", "eventTime": "2018-04-16T11:56:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: pZNoKiRoWHcqJmEBf2itFLfe3T3GIP-OwhtDFFgd_D3IOBTfq3SsAp_OlQImaY8vX-H4CzCp99VkauwjcD9S_7OEaMClP0VDRoJqrqzP7sv10nCvX_-eAe2ddAUl4FgxGEGNjJQargpG3IRoEyJJ2WuGhOrnE6RxqQ0H77DHRMySI_ceBtLicqaifbqF3NMeqvkxceoF8xF89gjklxw-DP3LxkZ_Ddm1a1yLDJpGHcrRSzltQd80JOF1pYezUkyeR39OiKyqycZRKK0RdlalmW70jqBrlR7MpjP5pytXUNkLQ87fA7ir3ffNRdBF2HLZxfl9vVhOE3Il0JYE6MzWHI-rs39vqTfEng6unDz6Lfe8ScOU8ua7dewqbC3hzz3X8gwkg0gYeAA4TUyZOPfaGJGIhDlsA2XTzsevLteAMMDPvb-e_d1z-S2mKDLMX5__tEKItMG6R3sWh30iyRpCo023eFtBKneb51IH5LIQRwcOmTenTJ5oEuOTu7exmm0uvk96llSh_dlU5u6eyIGXqjKtbMWM6mMsw6aeqdAnGdzxYJwm9tQ-GUnXGET84tBN1kaqUTZM50gXycthBxurElyeBi9CZt_RMURPThgN-B1rZRQ24lYXS4gtbwZSJAmlVc7jz5PvinkqlRKypca4DOY70zAS-Ob1vA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.12xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2fbd923-1287-4665-b611-61767a22095c", "record_id": "flaws_cloudtrail:0000562:b2fbd923-1287-4665-b611-61767a22095c", "row_index": 562, "timestamp": "2018-04-16T11:56:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2fbd923-1287-4665-b611-61767a22095c", "eventTime": "2018-04-16T11:56:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 6dj9l_jAZSxZHqh7xDwb5QloAa9lJWQmvsGR5433NPU9qWH3AqQvGdtWm3HQEsywU7UiOdvTan07HNs7p9ak9RoyQoSSX7B0rPf7gTFda3bEy3N-5wXwSjW9SzeUwvSK53QOh9Su7_Zu5Tcy9PTIhCaPKQzRXXgWEtXhYDNE0g09fllKrUHq4Ki-bnZEetwjEeSUZTx-zTYleJObsjZT7ipDqJrG806mwZmfWj59RjEjm9WyhvE_pH8r7UMaQvv_jhJQX99_mD_6qVicq_IQMn05d8di5gjkupQ96p6gUKPouunLoj7oAvpaVbE8eTfuUkvikDZ5YumWUFjQAVivTallccCc4x90_ImVNtm9_SoLpcUZjc3sOYOJa9C5zf1tPYmcTyZ-eMIvkWPp_XfTanBkYA3qDrx37Bts4_y7OlXS75WWkE9e72-kbD-jtuTs0iIkbMIZN1p4cBI_1wIVi9P5vvCH00imcZgMaHxdlfPLDjPMiUNuJqncD0YVoDFzF_hHzyPgo8mQuiW5vYe2Tg-_T0hYc5vh9hotJieKLl0vkgJb3ZGGHhLFvv2HOAxm582PcZDrUCKIZZ8ob_YCLqlB3fktx2ZQtxtlGIHIdA5zFYmlt_VXC5QLDiblPIRihSAxroTAyFLSvBR7NJyBLC0ivOL9_NxRpw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.9xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff10e358-34dc-4f7f-add8-7a4c68f33d4f", "record_id": "flaws_cloudtrail:0000563:ff10e358-34dc-4f7f-add8-7a4c68f33d4f", "row_index": 563, "timestamp": "2018-04-16T11:56:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1751, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff10e358-34dc-4f7f-add8-7a4c68f33d4f", "eventTime": "2018-04-16T11:56:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ksQb1r-GYsxL-hdnCxRV2kVyPC0eh7pwnakrwa3GeN6OsSw033btG1VViCpaPvcRa0TzbFasCO_sW_wjsKpzXcWqS6mGu8t_vAuZxVkjWOBo3U879wp0vPaHgUPcrQuCcdAAfsJZ1VZavvRULR1hEkXnDzC4e2YrPePufxd0zbkFEx0-WC1BXpwYEBNm_T-bdU4R0yD0g98rPjIKw8sE8PLU4z-nKIRuiwcYQZqE8W1Kytvc114J6cR8uCGzRQ81543EckYW78_2zMCFfedJyyKAa--W2-OzbyuZf9yppiP4kK6exhjiF0mSyBIrK-Ejx9-fo1y5W5GCbY0L3pV4oYf4bR3gCEWYxhfuUGAhyc7pchkZM18xuxCiHVdCuHaS5gSLb1DI52ggWoxKL-tyxgyCiB3ktiWtNUH_BBtqkQBjJ5F8YrqYe4fd8E-0BLaQEZv6DVI7oGkFvzq_ETkLq2Gr5rMZGpuTdj_blKpeDYMbUIohACzwViOciRLR2z0ay0ZUKeT_GF-X4tTJBvQcdZlTVoDNKYVn6i6CScf2efbpnZ3btGgFxWVkp3HuZSavvA-3Jzh0t_U_CbbkS0nrf8q_D0WDlezXL4YZO1AzUgxoznZlR8FtxHmfcUtHfbdy4TyF0zLl_7wEWXb10aceZo9ZTNgTiPaajRk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.10xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0f92c35-deaf-4775-b74a-9a72c358a33f", "record_id": "flaws_cloudtrail:0000564:e0f92c35-deaf-4775-b74a-9a72c358a33f", "row_index": 564, "timestamp": "2018-04-16T11:56:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1750, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0f92c35-deaf-4775-b74a-9a72c358a33f", "eventTime": "2018-04-16T11:56:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: srG4lgGu3x3x5YuQzwDZRg2PwTWQGe5qmhq7YAx1rhMoBxQ6wUj_bA_cUJRaqI743357kbB1Jf3Bw65wQM0XKNJX6xxK7EgxqnF4FMBhJ-q0QD2X0m2fVgOOL1-8esvOKQiaTDOPCMv3YZcVJKArbVOkVDNzf-O9IaPL00r-rCTLqfixE1ZULW-hrykTj_OOSWXbbjRv305VFfVutEd_E41Gma9NxLpUYB-f0c0ygl7rT7ojZPz5Cijdu7jktvsq9pyKxh6A9o0Rcl2rWsGDjAARWuLhcIBERUSJrjZULJnv_Bsylx7dozJBAnM8ZwQFKsGXcPCbm0tKA2Hp2X_Q4A-_V6rmuiiS9PGZOfyTV2PYYBmHyCLKNSWtgrKuIov_IBKyGzxIh_ZRzKlvqscrs1FTjUp6xvP73z7Ejd8EMd7x52f5PO4EeIqxxa4y9BCrcXAIBORAIjDriVaJrjmasyPQfxPiidZk8Rb7Z0f9UmvnVN-COIqJ3-e6aX_1sEfxqBsJy_7Bz9l-Vc23R1hdlCzPpjpT9t1185GE90HL-a277NpAcoMbDap5p6oDvsmeyjFqthXMQGih3SPQIHPjBNu-krhoPPzI7wrf61mYFSpnv0XoglRs7DEHZ0-Ju-VysZ7R0Srss30eM-keMz5wyHYWnDcC5-9AJGg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1ab96b0-83fd-43b2-96b4-c91b08493", "record_id": "flaws_cloudtrail:0000565:c1ab96b0-83fd-43b2-96b4-c91b08493", "row_index": 565, "timestamp": "2018-04-16T11:56:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1ab96b0-83fd-43b2-96b4-c91b08493", "eventTime": "2018-04-16T11:56:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: EGJOG-iSsVlKW8s2HhBPvNyXs7VpsaMwb8nSkrLIJLx_5ygMKhsD5PbghIpDNnFsLtyveWmM_zBWk5ZINCBmnySvnRJr_6ORHhsOOrcM5u66wtFliNduTRM7E7my9rRP69_Pwk7wGV6MpUFVTXdVkFpRrI2WBEpkfCuvI3_CCF_-nANzgg1R8gsqulqb37-veqQ0YGgN5ZWJ1gTPQRmZAnGflngUNwCg3yrnc6K0Cc3DH8wpu-Ews5uPmvrWZ4FLP__6Ugoon5e3-RTCYuLCkOy00iHRaAhRwvKec1LteMqEdHqa3IelluhZC7VljM2f_DrmstoQ2Vy_sjVC0i6P2H5yU2wvyiTapjRctcKygthh8J4nX1rQmdLufOpAt7BNvBfi-YASEECS_rpmeNzGmNg4Gxs2dUWbgnRryv3rbBJRow0DXD5r84Xy2sRJIO-wJOuPwyRudN_lhhXapkZPUdHIXd8RwEzVzmDIB7bqws4BtfzcKLbxCxLAlcmZVlBNBN75uQ9Dms1w6tsy1bbzX9dxjrcAVZZOW0BfrKMw3b-RBdHtPO6K6KWiUnEg3rE6ZcMTElp4Wlv7GqTt-LgWTIG_2YTq-YNscseeQ1hZDYdu60GacdUUfj48dNv8u8q6kuFJFnbWV9-ZOBUMFQnerMNgiD04e5Tkfg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "633a464a-6c2c-48ec-abfd-2cc082319eb6", "record_id": "flaws_cloudtrail:0000566:633a464a-6c2c-48ec-abfd-2cc082319eb6", "row_index": 566, "timestamp": "2018-04-16T11:56:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "633a464a-6c2c-48ec-abfd-2cc082319eb6", "eventTime": "2018-04-16T11:56:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: XPGRSvQ4a8IiooPW0jASjxa7HouJihpE_oF43cD42SLcvheYT5HJ_GoDIYUV_fU0w_ecKtoMvN6t-sjf4It-yQ_U43flpCfzaokuEoM87_uluYWDqI_iQDcWfYPAfMZAbCB2bljXpoOANk0mQqEYxqkoYL62Oz0-FmCRQLpRNl7wlJkarKJc4pbqAapnwcnCyJLJv-sBD9_QqiLOEgSe0718ji9U9H3TTC2tnRDehgSImUkFTHv9kqlraquViGXh3Bc5XUTokWGToepoEb1sWvwVCuOhIJl8R-5dTNoRV_9iI629m1aRjZakhnDj-V3fHzPqUkhbDtfwflzxmChu8Si1RNWv1Wvv6sfo1vvfv_Zv_ByIT7w4jhvId93GU9Y-aY--2DuZHnysK0YPzQgHMQ2n1r0qHG12FyypjPWeKiyIX1N2pBk6xShAsqTEOzc__x6nHtzPV6j5iHVZZeT2VR8BuCMgZ3-GS91-BngvjBpt5m5ZB4ioqXwRvgNChpTctCwMBWJgB1oC0ah-ALadohxAtjkozBUdpdvAElcgW--IDRGSmEmWkraY1vCps82vzdUS1vDOxhUbjojSZLd9WgyBYqwtGizrnm4eZi71P5URyAwsRZjKTuPh3kGN4GKxY-jAa4QwjB0a674BXXPi4iddn6XIyI32Hg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89388f69-f037-4b49-97aa-6f3033008935", "record_id": "flaws_cloudtrail:0000567:89388f69-f037-4b49-97aa-6f3033008935", "row_index": 567, "timestamp": "2018-04-16T11:56:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89388f69-f037-4b49-97aa-6f3033008935", "eventTime": "2018-04-16T11:56:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Ek-qUKCuAMfPtZ-I_tkjLhTyuMCstanD7tQp4x_b0XTtpZHHzoNpPzbrNyhyyESE7sfZvf0WtFpO5k3ZXa6cnCNsB6LzvAS2-1aMDVWAt03okdcu0vKf02SUsdqEhuR7D4V4nbH_mln06VkWcd9fe5ZokJJoMBEVmWDLv87FczC5zG47iNCiS9UAgPEA3OsA0V-d7arnmUK250c3GcJSbUXn-CUOkOezqgWb96gNFOLvLzgSK7Fy5LiFPEWWvvcIFNRnYmPVsCiA8vRvHb_BoNM6CC9jhqZFvg1Q54DSb5ZlahbUhIpKvUJohnjrXFUa4j_-ekWM6fio-yzpyj53c-ovJiq8ANz9g4I0aoamz6_E2NCg6UWZn3YJcetJQxQcPYGIB147YMPORmGXEoQNcRGh4-4ULyUgg3R516kI08ixkiOlTJ3HXlR-bYi5kfVoNhxg6PM3SvJyZamhQ5KF9WqKR0tqcCndgq_nKZAIrzx5Dn12By7Asgtbh9iqOcO-BXgWzFStU_ei6yiUgfI3adfDDiUXAohV1Ol6AxKY-uymc_8-7HEwMIRyj54u2qylwTeU8lMXFLYYXI-jc7v4aJEXTvkx7xeL6P3t0kGn_ZEnkyyJddmZ8EbA1hTNdGEWcr8cy6YJcIYBhGQBo3fU23CnxGZGoH9D", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa0c65f9-061d-4874-9a9b-dfa3e1afac95", "record_id": "flaws_cloudtrail:0000568:aa0c65f9-061d-4874-9a9b-dfa3e1afac95", "row_index": 568, "timestamp": "2018-04-16T11:56:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa0c65f9-061d-4874-9a9b-dfa3e1afac95", "eventTime": "2018-04-16T11:56:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 0NYPIny6EuRiewq-22FxjtY_8GkNweQgC6uJOpAkFj4Eq0o12dUfanm1RE7soS67hbrY1bXNfRtPALkIdWYDkjRbBVWoItt4q391je2pAnSPG4Fhlwj4u4Q4mMadlxgv3avwkCTMXYC9ED3AaxOME1W5-4NjygYuELW_v_gLt7zO53f5fApGjJG_573axJ8R1lmzSyQdxdb1odB-oFJjauY9D7VhuUYcmeLQH2G7lkmnbhwmt8YEv_Kc3ikCYDbw1LoD61NH-URM66OwxYCLcqni63DriudZ6DmjGs8-EIGljlfmpQCX8SyLF9Cc04vrkfelKoSqSAqrNi0Dyz-Pp2qP5vSk3q2vLGNzNeE5-yz0Mq0GRMwwDbBlmUFqdIrt7CpLjwl7B7PY8vNX1QefNifchzBtW4oxTHM8ONaDtP_xGaXcjG-KqzUiJBI27ucmMVJuEoxyDxod4RvUZvbXDvCWBO0UT5TzLlQ5EpYoEL_wqPCCxLfERVf-bXpSYir6_NdxXjSdFNT6IZiRyUVRE9A8OpN7P2lJe_p0BHx6kE3d8d5NBduPNG7nmhY9Dqj11OHuGyKaCe84uYXAO1Dtpwu60DIFU-wc5nrlh7gCdRJcns-XRp9LSgJQFTnzZFCpnlWyp5fWA4CVZnxde-JiKDwN2OO6391qdQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c266144-331d-4796-be4d-e0cf07b826a6", "record_id": "flaws_cloudtrail:0000569:2c266144-331d-4796-be4d-e0cf07b826a6", "row_index": 569, "timestamp": "2018-04-16T11:56:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c266144-331d-4796-be4d-e0cf07b826a6", "eventTime": "2018-04-16T11:56:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: e8eAhvUdhpENv7E7tze54Bds-BPZ6LChJT-Nh33OKYcfXz9_zfXXu1LqP7oHMJ7dDj1smoWVIeOYMCiYgxDbgJ-3R8SgvYQ6YCgB2_ApLbwtm5ToKxh3W_3R11fO2NutaKU2a4aDBrs1kVtApfgXPsX9h-BVRsiZHd9QN1IsoyYudnFD9pAaC5ZAWkx6mrEBjz0EY2_TQRInT0qCCGzDt7jMffBYYAaucstTiBdxEVLX4YL9GaeUzIRMlInRv1YgmhGMyHZw0G8g4RVyI7lh3e7pKxwC0kfUAWV5E3Tge2KiiRonkxF1Ms6q9j18jBaTckmX8k4k2o2a6H_Oc8uG0K1uaprF8IJs0DURSz-ru9tENAPm-zfbajlV3LbVjEwcozd78tOq6iGBXpF7eSM8gJGqdbRf0qW9zJzAHN8YEo_PvOL1STrmwUqQJx3OcnDqZbe_aSPnjwqg1QxGTfY2VJkuVBGmqM0URRV_H8BcPde5OWpuE7orHErAKhD4U2Z2MCjfMeoff9JHpuXPX5C_byf2lS2vbubdI07DRIz20J-oRUhsf2caFh-FpN69paCsJwp93Iyg-2okis_Y-e-3C1hqCn937DAk4g3hqItYRJINualvi_REgRhejXkV_R_9V2iHMZgE44WB_Fju1KFBZEBWNNdfDUtbrg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "839ffc4d-8051-40a5-9718-d65eb195eda7", "record_id": "flaws_cloudtrail:0000570:839ffc4d-8051-40a5-9718-d65eb195eda7", "row_index": 570, "timestamp": "2018-04-16T11:56:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "839ffc4d-8051-40a5-9718-d65eb195eda7", "eventTime": "2018-04-16T11:56:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: g9xnA8lFsrIL3xVEUclWU6_FPjAmj796nB2eJAS63_QRMUMQlJs8zKdyyJhmxiFkJCuz7nwrIwtTP495OZPbTLo1JzAhddiiGgR0xyPOef8CkCQxfGGMbfrQJOip07J1cEJfVrvOOyv6Nte-4IA0I1Z_N_WxBVb2VfXP6_rS-sMJnkUM-Xv7eoiKPXCj6VPqIT-uHDByIUB_PficA8836pGO-w-x7U5ulEm2mav7JMoH7URQ3JThbQq6zQc4pfAc0ynC0MbBs2-yFQk5Vrm7sj5rL48cLwdcIE9QDg4IHlc6OSXsXBEM50nU1zci9H5bhE9yEocx8Z5mj6FS1fyddjFtLn-_E05U9CZQs32JLGLEWxkbQ7nSQLALR37fItGphy8yUUTCZNyW2VnsevsJQddegoFDvi8_m0972JcIYJod7brdxGJPlwMYVw9nkPJSR77PIzcmYbFVLCkBE3xxNYsTp2_KYhrUfgkcBt3sXsqiylviSITLf96_e9ynRJkN5bB1ivejkhuzRXGogEbF6ZfL2HoFNGoUjUzPXbSOXPZixTDEGIzjua1LXtrGlpvw0lFqxl6tVbe_c3utuvVjQ3pKd1ATqDzf0VvOLqqSUau9v3LymDv772ZThSXob5egVH0zeS6AO9ORjM-AN3ta0QkLu7_e30UVZw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "249941c0d-1625-4712-a46f-8f159ab675a0", "record_id": "flaws_cloudtrail:0000571:249941c0d-1625-4712-a46f-8f159ab675a0", "row_index": 571, "timestamp": "2018-04-16T11:56:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "249941c0d-1625-4712-a46f-8f159ab675a0", "eventTime": "2018-04-16T11:56:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cPz2GMqePx6iyZ5iPAM4NbccflHjiZcY3aqXkn4EaiTWocKXWis3b63NZlQv_sDRkFJ1UpQK03jAwXgTV_W2cJYrT4b7mC77PtNal_f_J6qavKIVuR4i3j18amsVVMldoS19QwllCj0W7gMV2Adad7fjfN2R-pcHz-VHBOurC3QJPE3_tY3QOutFdgShTzobzEgPCid6jMWUOIWHu1zLwHwsXUaycoxf8slcaO-k1Gx7_ryEjdioSdNhyJT3Zf0w_qa83HY0zu_a-4DXVoREx9CxJJSm9dbXjeZGcd1bWC0gNVdj0-yjmSF_hvgk99O-Eom4zWycT8KPdSoXGKUi2Cd4vJ2hR1NGwhzDgY4ZD_rnZnglEn_MtxKnSCSfxCiVUJ5y0avkoE-8ecjcpz-Ob2q67-Wn4uWtLVnQaaOQmi5NHEELUlxHcE7Ro4T-FNgF6l8tyHq82obM3A6SERuiPncR4BbpgZZCU0DnVnaY8YlL7fqYHdA03IQ5UzthMkdwlow4Y7jZ_2IgKl-08HdY4XKKlGlb0GY1VBkbuB_pSM5aO87pufrmYp1W3uFYnp0UMJJMWdNLzsF8_d3pMNfzDtU3NtPWptxP110SjkQrRqiq8jzV0Yvr2snwShrDdA9l51AyATXcT697chmzTpkNt30EC6QCq7AX", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f85ce12c-a805-4c8d-a9c0-c623a6f5f07a", "record_id": "flaws_cloudtrail:0000572:f85ce12c-a805-4c8d-a9c0-c623a6f5f07a", "row_index": 572, "timestamp": "2018-04-16T11:56:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f85ce12c-a805-4c8d-a9c0-c623a6f5f07a", "eventTime": "2018-04-16T11:56:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: FEHxAmNEcuBCnYqzScTFSAGuJkszT5dynIJuazHXi7GPn9QZonlC-dx4F0hlJNumz-l1Q_nAjFsQ1L1PiJF8MPFr5IrGoG3VptEgJPvVa8vtKjb55_SnEtyy4vNSmgZIXmy9WsBDXjZF48tmuPh-pJ5wu5IMsaT0fAboUF7Q52ePulI35E7jblw7R4H4da4MyCtKYHjMRR0kmLf-ghjiNBlQlklssRTMcdmvbiEg-XNKWBnHv6Li5ZlFgEFEoqfIbEGbE_ZeiUIlrz6eJJINrLna6xJ3Eal7JkyPufBWdcmXp5xleCW4nklOzPB5YwbPWnpiuBCy0M2VIc-v9WGOBAPKoB_eZvkbFhRR2my49lLHoI9X7YabHb97cFatJscjuw4RFcthWo1dJXY26HglpXrIHwkO4Rj_Ly8ZBH4Kf7Lr_OthoafUqr0KzOnQBk8TjAlx8Esty9Z0lK1RqLij_q36FMxYL9zp2fHNORxV_Qxprf8G6VKA8alh0YeXpfcIDm76cUjaMfEAQ6hSfeDOOgzlrD41UkmPTZv0yRu9cBcaZRzjjqCRdo3utMHwc49uTjw-HCo_Uwf8gXxivppOKczBRYoIQpgZsi5oRrdw8X9or6iBpDqFzG9oGbCB-QamZ_VM6dX7Aw9rD7nxLZ5Yh8AdhFeyR6eQNw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e58df4b-1f0b-4434-8780-6a78f248d5ff", "record_id": "flaws_cloudtrail:0000573:3e58df4b-1f0b-4434-8780-6a78f248d5ff", "row_index": 573, "timestamp": "2018-04-16T11:56:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e58df4b-1f0b-4434-8780-6a78f248d5ff", "eventTime": "2018-04-16T11:56:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: fahaR-mymriTE3tUK0ulNIKZ2SnbuHzOiFDGa6Bw2ezmlQc_2D_62ruH_6A776IxbT8U3LY9fprNQrCBh8UG1GaDhAB_P_kVeC3GiRzYcAyyYavfDeWBVExlk42FMjLKWnuebWieXEps05fP7Pcdv47QmqAkMkJCtAoNrh3URPy2Gb1LGbK11BS2Bmngr2uj0R6CU_On21OHME2l54si-9YtrckKrODckV2QDrf93gPYHrcaaS5CzSJRCButF0fPM-6KMSCIvezxcC3jd9HAyn24ADZwhF9MAyIFiNsoLwwprtQBOLl4WJTuoMX-ldzIERy_HxUOBTk9p4rQb1M8oEXwUbJnuJhd2YgiW_8qeLdS3AuM_NUnxVWPOtdZ97QM-8e8bWnlQzjOWVXfptdto42W9Lkz5SpM6tDFXGMe4-G4NYO-7bGITi0qbM0T9aeEdMF6odVB9yXRWxjCse4e3spq_kNUNZPYKB814u0SAOJT52M4_zkcIt0PrWwJvfqV8Ij0kUrBDIcS1xN4xuaxBdNUX0fAFaG5gwmmyr-pu58NK3FVsb0zkGN6ORmmDQTmG2QSS2yNSXSX6M2MJuWT_4jfqsl6qpTMhA9z8zedXmCqNPA3d1sLRs20NvNisF30JLUBEam3PcfyoFokdoGD010XzMQqWzuT", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91c0cce0-e254-43fb-acac-8fe52cdf7d1a", "record_id": "flaws_cloudtrail:0000574:91c0cce0-e254-43fb-acac-8fe52cdf7d1a", "row_index": 574, "timestamp": "2018-04-16T11:56:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91c0cce0-e254-43fb-acac-8fe52cdf7d1a", "eventTime": "2018-04-16T11:56:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 4-92ZuAtF4S8CoBSjBqwxIy_oiuQcHM6q95CA7TE7Bcsy8obSymqEVcSC-NBMftFFPUmJ7-mnzv7tHYJ3_E7By4XlDOMHR6PragX74ptcJ4yFZupHPI1xl_RQmrlunLoj9lfFeQzlERO0TtAUFQadSDgS41mpDwxRcnzWDXFVxJD0adviHqU-cmI1QBhgNWHlAQ3LRvtO8nQoDb5mTTj4XAhkB-mFAERYCjDhtIawA2496mLboET_qopukOjtJycPzzRpcK_4BjETGxlAsK_K5xaPn8KkplfVrXySuWPEhom_h_XK8JOjcg1AH_cuxjUcpxR5Wm3wDs-S-srXFqG_ufmzW0v9D5eh4ZYeFIyCan05QtoA6Jm11I6iyKg5SzFqWX4ZNMTJdDoP3V3etT8eqG6fuFdKOMwPGCXTst70jmJrW2wZWaCKbgQ8ORIISFY2hMlTwnFtf948Z3ppbStzsEcLjOWiWsmcUrCGlFx4t5v5H-6O_TDnl6BuOCCLrGIOt177x7pE02uekoA3YK3Oyiku34qzDYgDipH7NJj7si1BQUTDyLDWUKbX_zatFDyGD6QT9Q4lSCvhg9XKsSjZEngyCzMZHLIrNFVkiwjepvw-pqsLr3ETPEVmzMkLK_zCnv5Cs54Umm80gwajxVrofsA_v9iFAdV9A", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51a3a2c6-ba18-42c8-8185-9aa88848ed", "record_id": "flaws_cloudtrail:0000575:51a3a2c6-ba18-42c8-8185-9aa88848ed", "row_index": 575, "timestamp": "2018-04-16T11:56:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51a3a2c6-ba18-42c8-8185-9aa88848ed", "eventTime": "2018-04-16T11:56:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: xxWf36xiiCUSacpn5FfQkzcLZrtXUyV8Wtg2fugs9UNiKYs6x4FMgP2rzjJYFOWZpQmxbNX6PABPJ6AO0Nr6YJGUFMjhTCzoFoUyGffVsqar2maBwsS5m04XQ8XxCrBmmapZJwEM2LlIBHWSAG0Tqnbd7NPHhshRXWYjbvBvgHTK7dIdWiBorBo3Egac6DbNDMFMzTAN37GBEPXV80-FrAu6r8RKZXfMf0yufMe5-bKFB4Z_VpxFuPUf1G0zHPIRyzu8Oa7_KLBwvFXeMj9qaoQBwk4b3qsWzX6qAGfJJQcOaCReTck6s-E5TTUZ_Fk2L1_mAWfmenqXmv3MAcEatW4C9Z09OK_CZxRLkJf5eejORrtGb2fcYHj6-O8WPe5X-oABvI4OLo9CtKxa_bKpk5F4i-yUT3etYAXCPQOZ9_KdpeQoVSAdUW0o5ik6utQLJyKlsKvgwrWZ66ijNfWKpyMUJPk4NQfGMezqzQAGj9yEULAKLCa0pz1n7-3hMiLYB1P8lF7HkRioip5bG3Mc4HiiHg_ccXGrPVJI2l9Zm5LQyPJ55FpyWh1LdDGYzvfeLU2RJI5gbeEoTEWXPP10l53EMCscDcdq4mLG1DWVOdY0C5LennOddxNXVe_3sCC-aoJkLeFYn-TxJQ3IIyaljSphSHCDprmdKQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0c3659b-d59a-405e-9b6b-ab296c1e83ee", "record_id": "flaws_cloudtrail:0000576:f0c3659b-d59a-405e-9b6b-ab296c1e83ee", "row_index": 576, "timestamp": "2018-04-16T11:56:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0c3659b-d59a-405e-9b6b-ab296c1e83ee", "eventTime": "2018-04-16T11:56:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: vWwjCzRFvyC9OSJJJaDYIyAL5wnsiKWyfTfrj_nkL8b7K6-H-2ZbFMc8N2CA-K1IMHKY6YKh-Eums9QON9-QWKDk9O9vkxb-xea1H4G6wm0rJIaWZaRFmfO-65DbTLwQMvB-PFRFGbRpIC675oW02ENbbhaQ8Ll-VPSjAeiGPsbStzacrwQf5Q5I8BjGLWJ_Sj85yuY69owpihrvBlN0DUaTQWfksaMi_YO7d4Sg0lgKDtV2rqosAeJNhVe7jipA8gl5Q3XRr9iVq0gqC4vhiw_lxCWnShOz2DAESDqEGq4uzN319dfWqKrtxuZZvhf2R5SrgEtTt2cm4fGCwUQuaKhByhigG5Cv11NnYsxWTFiWsUFVJM1NjaemQ0SJLo5O0PiqE1-LCyBpYbD010caE-gzX46z4KI1LFn_9WKysQuxwohRcvhq-NXKkcHfu3tMerMViBfDw5nJiOQ4f34IMTof-cbGt7vfX3Y3YjUoCmlsPzNouD46Q2OhSQ9R5kUrQbchkTnAlbTsFybUVYGoa_Qmaoz9Q9FLzHVS0p1iebYscMrhKvEJTZ5ip65q4sVcXaujAciUyjKYb-4r0MChcsbuZQU5jBA_Y9Im0dT8_6PmP-HcBPlrPpz7RTGjgvP1cbncYDMFj1J0M3pqXwoXoZf7YSMN8XobaA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a56d5d0b-a334-4485-8e43-b79e306a693b", "record_id": "flaws_cloudtrail:0000577:a56d5d0b-a334-4485-8e43-b79e306a693b", "row_index": 577, "timestamp": "2018-04-16T11:56:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a56d5d0b-a334-4485-8e43-b79e306a693b", "eventTime": "2018-04-16T11:56:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: qfV37GmeKRkIJE_PQoOk2ZHQbXcf9GO_Kb5u-An9ggUMjK8doCpWbsU06wYw_Os0lvBZjx4Gx4Xu2KqOHOyFGHYlkcMP0oPZO1zDoQnrqySMinswwv_jg1eERdu9cyZbaM9bTTpqwTJ45AOh-K9MDxXuleBnZDqzyEbX2ARLHqP6rfNKezFEva8o6Vk8DJ-r-R36wcHxb53eP0zefLcpVv2ExuMs0MdnKbc2j19KGa5WmEA9mXtt4NVkA0m2sgFKoJMlo0BDaLNzTt_CqOquMIMU2W_SyXz0SnaYo9TjQ2XiI90Si3dSZiq6PewA7q9ao-glBNTpHmvzZPPYOy6Ts2mrSqr1-QvXWDmZXIntMZOV8cX73Siz_5Qb9InmPq7FTV-OL8lZxd1Pl1Kw--hNaKkXTJJ7-yUgw6PhIo49u2m0pIOgQNxlAo7R_hUdmFN_-n_MKT3WZBrn7RWKY8qsMVTDTEvFd0neL4y0S0K04x6-06RXupaAEhKOjBkJDktt5bv_WS8M_DkBhcN3BwoAONsrS6LQ_w0eD_TDXPPRhTS1tP1OsOXRpUzuPBKFLF1T868UfssgWZO_I_VaAViLVdPBXOpb4OsXGMvRN4_WeYWx38pqtbhS8u77GMbKreQPjkFAhut2JGxIoBBPmfao-sfgEHvXdzHwzA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c45d6a3-6a8e-4737-8f95-eab059b841e0", "record_id": "flaws_cloudtrail:0000578:8c45d6a3-6a8e-4737-8f95-eab059b841e0", "row_index": 578, "timestamp": "2018-04-16T11:56:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c45d6a3-6a8e-4737-8f95-eab059b841e0", "eventTime": "2018-04-16T11:56:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: vDAC-P-Pl7Yfq8M0375-0_PQ567MQ2P-F_dglPZPmIl2neb5930j1UMyOGhJKVfmzYKyoTdyYMhdUqs4-aOkHiYFnE6Vkt1B1gO78LnR0befbTBY5REvTU6zv4WnAkRyCdc2beNEBsMggACAEp2yMUyezaTVFyBZkx4PwtBxoFXtrz_Xk9ZsapVn1a24x3u7o5CKyPh-iTrYNYCkqpBtgMU8tKbmNSg8AxLGRMvV0pKAdebEwEB_EaeKf8bbsK1FQoQdW-doXQhezShCdt_wX_f64FXiuI7bf2_Lxh4VvTsI3NxrkQLM49izEuex9ul98kTQnjLuZK-VVZQo7xIS-vhy4Jjj8JhMP6Hkp5EyjI_WCnMfCTQgGLe2g9LfnegW4_55i_iowJIqu5KKhGmPTXXySwOnWKdx-n8fT708porsAcjG_Jla3psJOvHAWjW0WCFGS7lEVSDc8dHRgHHs7BPgD28AXJtFZwSr11KnRR4MBmYLCaOvHp79HnqTqDL8tQdPvdEPYBBavWIRst8fm-LhaELCW_9_0Tu7OhGP_NYeW3PqvpS1he1yL-uSEQkB7F3ZKmD1OyTn7exfoTb_T1-vfTV_kt5v0AFqk4fPMN9SsM4Ka9IbkdcGxCme8oFukNBn6vE9AzxaVU09bipu1tXEnthYl8DP", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e57ea378-6de9-44ff-954a-bf51c4f263fd", "record_id": "flaws_cloudtrail:0000579:e57ea378-6de9-44ff-954a-bf51c4f263fd", "row_index": 579, "timestamp": "2018-04-16T11:56:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1745, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e57ea378-6de9-44ff-954a-bf51c4f263fd", "eventTime": "2018-04-16T11:56:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: a8rff1LSZHxxKK_RTpVmN8FG7rH9mM3GAKzudktxfCbErBP3OGNLiIVcKqsVOle2QRuU4x9xnNPo0HTAp5Rshswlya-_LYHqvPjyorNB4t3pMTFBUJCVNSfBYfmvs6KIHiVwLem-75VRFXKpcgTw1U2hEYpm1v-jFGs0jEPptZzckPOXLe0kEKtmzMFKYA8wXmfvVrEEAa6USEdzWgNQGxzw9I8XVIGbYZxN61hgi6vlzvyQ_8Fw-sVG_G2LkMBorqPqLAp48WgsryCagMSbuDkjsWJu0HIQd0ungG6tvZKsU_uQWeXZNXlgSyblNZBpjdajJNnLJQ8kgP1dUGlj8Ig3b-EAnzKeiTAavGzXA54b_yurFrUzpSYv_cTBGxlC9TmgK8CoT6ggiygB5_n_lBlCIL3XsaaHZ012bP9IBse1xk4IZclB8B56qT7g_zDJ5n7A3tIGRdgJ0ied50Xy0kNX1Gg3cPt2-piIJX8R20EE6yvFe92wwcdh9AHjdom4OYwj1Gug_Ack6wEbIo7ye_hdcK3ObMpMh4hYDDi5JCeUur0Sg0HSu9vTfaTzSREROo560e_jhycZDahzoIhAWUOv5hHgZPCmVykb6WooTLkHpBf96DnN0L3KopxnuXLq7ILhzbRyIOh6L43Lc3jLmLfnhn-BMb8t", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "960282aa-334a-4ef0-9e0e-0f8421d35f82", "record_id": "flaws_cloudtrail:0000580:960282aa-334a-4ef0-9e0e-0f8421d35f82", "row_index": 580, "timestamp": "2018-04-16T11:56:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1748, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "960282aa-334a-4ef0-9e0e-0f8421d35f82", "eventTime": "2018-04-16T11:56:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Ub63vP8Q5TV8Ltn1l1pW_n4PJr8KnJKHUHtA5INArP0LShNtVKr51l_L2EbCbHCBIoomqJTARR2njaRTdYRPkkC6xEBWu4XIUgJAfSCSUXQbooO06TpRT8g3lv8QW0JA-zKsIDtLYjibfqpgCqQIH1cWz7KCUvRxZsXslP-u2e4aKki-QKfQ9lEovaak58bx0jiL8HPKzEyQ0AxZoOzARXe_FxoZvk1d6bP6S_8_qZB-vgTgiurfVjE8Lo9IIKJGrjAzO3WLBx0Lannf1pKTUX33ZzEUQ_0ErEwMHTt_vUkqDtmNoWQcBYP4a_HSxbq23vlf9ZImcoCJS3jgNRRgDm15Z69hDFjzzHlikxi6OX4dK3YJfhF2wz56MnESolPqPIORIDtukiRyaSsw17qObaAj_MjUit-RGFuaC_cqGkHX0UsxSOPbLfyhw3Wm7ceZN0pOYRUlJipoBtTfHtDEsjhiXQCk9Jn_P21n_nkmtn-1fUqKH-9foScPBRPTmPAu-r7HoYGYO4X-2KOWZ0oAF5UK2ilE3wOAjT6vnXpwDISfaFQnjbW-aYB9mAdMePyz-ZP37gvW-U-ppnihenroVF9wHDl6Bdr4SangXvAG-zL7mWNyR304QHRQZH9tz1qJGyrMnQ8x66gyrpGdMxqV6702zri7eB7oJg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40a516d0-6ac6-4ed0-94ba-8a031631e568", "record_id": "flaws_cloudtrail:0000581:40a516d0-6ac6-4ed0-94ba-8a031631e568", "row_index": 581, "timestamp": "2018-04-16T11:56:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40a516d0-6ac6-4ed0-94ba-8a031631e568", "eventTime": "2018-04-16T11:56:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: xbQGOwpn6MdAZXRFzZ4r9XpD6BQRLwcx8I7k5mw6lc0Vwlmzt6vdsDyTVOuX-YtR4bsh2nQXX0dFRhMuX20V5-FxgdNozv_EYG9T0nOy2Rkof_-rjeD6jYg019_eLJPFypjCI-c9iZ0cRj82G2LJgp5rqqCMsFp8dJJMnNVFVfXCyNbkF7GybrkVa8Hu-H1vl7XZ2R1Wf2UKh1wTNRWOiNSVWBZlvQZnuWAJydTQBo-ExY-Kx2VN71NMRLRnYdNTvfenJfU2vmnB60G3iKToUWb69M7u3qKgTSBQN1jvClGge38q5N-yXD82co4okAaTqdJL0PmUpUdfjiNnvgms2DhJ1v4KplLWezFdGWZsYUS6052m372CwKyopiGxnEsc9I-a2yRTClxwylcAyyFYslbMszM-XsY9G5Ttt9qBb4knwJQJ_cNKO5OILKHxi4pw1Xth2AwBLkxJHjBobiynkha1jtAxDeTZFmlAgM4eGKE-eczNWJmDmuPtSOe9Qv4x3C2gQhBFOHuOwT6khWDtOxd9shwddi5V2MOssF1NfXgGKsBD7CG1iUDuY6-pj1PvunAdH-eWfXU-M-R1fg9CRH8tPdt266iSpNX3SHREkLt2t3wDXBtejUKCgDDVi-dhXCL8zsWzsPJtxqAJuqPS5ztIONHZRjvr", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f963d07-0ae4-44ea-88f3-18b5a9762f67", "record_id": "flaws_cloudtrail:0000582:6f963d07-0ae4-44ea-88f3-18b5a9762f67", "row_index": 582, "timestamp": "2018-04-16T11:56:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f963d07-0ae4-44ea-88f3-18b5a9762f67", "eventTime": "2018-04-16T11:56:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: pi8WgKRGMJt5fAjw0nP3nhj8j6LzGTLwK4r3INiwBHLOJgoSTYbu-eYi9oS37_1VbzOhLdh6tRBW1mzmo6PprUNUCaAcHjnJjnc_ZU8x2dmMOYz_o7hO4gkJiBaJYRQ__XieTTHLbS3DPB3sxlfRTwnKOYertkwLb2eq1e_pHzCkMvAnUK0yhrIhBaanGIUd_vt__NYXW2tM9iIqrdh9-r7BRdK4L5NqTi8lUvpLPsp6s_jGS3fZqxRE8pncyk1Jk2v4kNk32uaDFXtZOG3AQvhfx3D-D8zPpwYlsFpH3yCO64a8dTetcgeORrFbSr9kE0HEHg4X8aodQFAfZP9ofeDgAFD2smLD9DZMD4RCgd-RH2PkPuOAq-O8TWHntL0HhTLaSICFTE_Rr1O8hnm14EcnN3DgVmBHKVD1UtZNhuRfrDOY16P5Xz9Hh0c9LoFhATXM2i301HFA9zltJck2R0N4ze_CIoPCexrZ1KRfyZ3TgmzPTTUX4hY7i3aqPxtyHbCCa3FgM2B8VOUV34o1c2pgoOu-KBbqIQ4haaXaoRO_KKkz5MsPJMx3I2Qx2N1SRjG3PX1SEzATFFShVBzgXFSI6w92CTV337MudrzJmDpUkSplsZorrYjXztkXv_nIlvc6MLS1qFv_C3DlnFF-ZAG-6ZGou9wB", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cef55ff-9794-41f3-8195-a80ff38ac821", "record_id": "flaws_cloudtrail:0000583:5cef55ff-9794-41f3-8195-a80ff38ac821", "row_index": 583, "timestamp": "2018-04-16T11:56:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cef55ff-9794-41f3-8195-a80ff38ac821", "eventTime": "2018-04-16T11:56:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: h_bgPSWGs1EnHuOVog6AJoeWxqR8JyiOCNy4D1Gh9C5jWbPTyegSpMRDj3phWrgea5uDTSZc-yqBW4W_EpFogpJYwGYmGwptVQFt7MgrgJUrn2Wa6t4C9FKyiCV9R3gwjXBxhNILHSd2N2NWI0bHjXSZc3EvQq22pxgR5Egn_ErrCp2AtdumSIgZbbWomSbxGu1_Yb7-AZ-XnaPWAO4XNnOJ-N8C7IpydIQna6UB6lIMJ1viHszsKp2HnalblRJBs2yjs2LP7JGuvG3N6V7o6RDcffuPSTFvp2Y5QlLfjTM9o7jmHjWrQrgjcw3_estgA83H2MK_Qoto7OkSqDGKEr8KpY_YBZ2_Q4m_FbEG-04GwmXFFROiw0HS4dADRF5Bcaf0l0ooBy9iVGjE1IIpjO42DGkS4z_TioxjUVB6yfEVeRI_FQMtRIPe2yhKc_bCUCHMQtIbAb1o4KTL5NNzchuBojJNLEdDcgA19MY__AcadAxAfe2duBsci6jOsmGLvRTaXhDYd-uzZ2OjUbIg-3E4ZVSFrSzB4MRbEPKCf4B7YqIAXu0k66veSod4dojoj-0n0YHhiI-GcSjR0Ta5HcyfLESOtYxG3EMCkmm0ygDsabnvS22HT14l_uBjywQ4qBtvF6PV0g6593O7JGwjIY90JMxGIqI", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad93d3fb-3e06-493c-9b91-cf380cddc91f", "record_id": "flaws_cloudtrail:0000584:ad93d3fb-3e06-493c-9b91-cf380cddc91f", "row_index": 584, "timestamp": "2018-04-16T11:56:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad93d3fb-3e06-493c-9b91-cf380cddc91f", "eventTime": "2018-04-16T11:56:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 0nj-4S57ToEmtbeZfFkbumZgqBS24vjNif0CiiI8DjbYGyUozS-mj6qfAQXgAMIrGceHMXzGWVEIbuwi3PC0RPbf_Ud1KkpTZPBMePsufybIUHO1YTR5rmk_LW0QfDyyk7C53wZ35w_pNl5a97pHNW2yQRq3kvkluIV-a1HbsTTUvaQC_0C7sqHtGxuj2i2b5gNCXX8dA_K8xfl7ssDQmAdNIfyncTaqa-qMg2o_-AzFDLJDzG-aRQDy2-CjAriicUUS0x_SK-brPPRJ5AusVlh9HoLhWoELOq_Y1xjwDssLgpUx6G7RwvsV2-JhotEVM4sPGWwCl-uIionvvhDKYZsXKHD8n5GIeR6LydWsJgjECcL8v99ATeZslPwy5Mg5Io4pLO1QDDazjXIbzAN_Z-opt5FrmopbLNOc0IVSyLGwcGV15O-ucwNrQC3h-LJv0YbQw8n5pdBjGe0j-gYZ7LJuKZE2g2gP5c5j3xp-JEu56L0Uau5MQdB0VQ3fp3Y2mGLf3H6Gjg6wscMVcRLlttiJG5Z-g_hUFDQwu-r9l9JWArn9mXwk0-JHz3YWADhvO3pitrhin-frekhRHZf4_8IxaKwsHGfXqTEmm3iQs_o_MnHh1qJwqSuNbsLXs7ewNmp_PRjEijb3zfq6nnJLwd1H1CiuYzs", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "934a702f-e0ec-4cf8-9ca1-98659bdec8bb", "record_id": "flaws_cloudtrail:0000585:934a702f-e0ec-4cf8-9ca1-98659bdec8bb", "row_index": 585, "timestamp": "2018-04-16T11:56:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1743, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "934a702f-e0ec-4cf8-9ca1-98659bdec8bb", "eventTime": "2018-04-16T11:56:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: xL3dwU5ACO5qkkVn_mfU3Orxu_9dxvPNZulkS1L1G5_wV01SbMyPDQz-cA9nBqxSjcTyO-FKTwOzHzW169hA81qeqiX-v5J8dv_V3XV8-bC8WfQQgfYqZ7vG0o3SjwZQcDnnZN3HP7WJ-LmY8MJxWiK0dQhVMBU3kdTnu3sL_TvBsoT2xnox0wb5CgOBAuAG1_vZ7oodn3dazKYOB00HgXkMqmMhlAx21s7eFAJslC8H3unCkQy3vjNxceItZeNuN57PRGUMdxhlOc1EMG0lo27QoyawEa-MaMtzOVNFGavm7hmOICi1juV6CK0YhVgoLZ2L3h-zYIK3ptWD4kiGVFbMOk22G-9yjoLPsC2TQtTg4W5nomRYJY-8k8By9z4E8s5MejjECsaCpquc81GafAJOm2K791tb-QvsBXaaBZ-i0YcQrIkVtfHKWq7_wQjtu2DsegzWhrp28BviQTjCHFLueO9o63WMdHCioMKyBm8sXGoxwZQA9w3tay0E4tFenSncqV8-iKG6W6gxn79VmXBGp85ttDSod3fr8PqDCA8_kpDV0Yl6-qAI5ydVkPGwffhfXmxgiF9u9Il3fiYimXLXvOQQbGI6MFkGsr1W4IsK2YsbMFzfVXxCH4ip7ZSP-_23T-7JFIR23HdIzDAHBP8p6bBeHA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa0a428f-e7e0-4c56-a970-a608465cedeb", "record_id": "flaws_cloudtrail:0000586:aa0a428f-e7e0-4c56-a970-a608465cedeb", "row_index": 586, "timestamp": "2018-04-16T11:56:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1743, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa0a428f-e7e0-4c56-a970-a608465cedeb", "eventTime": "2018-04-16T11:56:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: vaT20nIraXOVpZk4lPK-y2cIDz9Xp_GIdVCBpE--YomfwrT4Ot2M3ewnYGPj0UzhcaFWY6cfK8sfQdignsVLQ5gDUG_kw_F2Eg8jabzTa694Wpr53RXDjJvUIAT5Gc3OlUmMi61bBL1LWBKPyj9RgGAHRjx2RD6A5knTrPIuXbWF7XlHWzaCghL3zx-WkOWj562VfB4zbFWjE-u_dU2x-8sSnzcZyCfmjRBEMLHfJx72YQrVZvRlY59zYNaz0k4j4DRIkf5-zIYcjMG5rEIEQ2cW9wUZACZBFD5qKod1a2wF7HXhJNfDEAcLqSG6s9cRAWXbNvAp_GkM_wwqLO_nTk0LrQPogWmf_ylbqMMBOo7rR3W0iQsl3DNzqcoJp8DI1a0w7vDlL09y3UnDGLcQRZ4D10MpDguaXnziSF2psuSkHepHRnVSAVPgTULtk91cwwKe287EXtmzDQVynuAR-XfMt1b3Do-KWCR8gj-1dL-jH2di-pnuvkyZI9yxUUKzZtuoet8YuWd-sy4JLgs6i6Br3kqSzbJp6RZFgc0Lu_f5q3ieUeHq54Ni1c4MD5h9XpZY6K1rzGKysKH4nNqC4P_DSvmUJROBTiSd-q4OhqvrQI3LO2q9ETYxgrifTVH1s2cocs3iwEFh6vDw4bVRrLSuzbAcFUQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0718cb28-64de-4d28-bafa-e1d20a191c10", "record_id": "flaws_cloudtrail:0000587:0718cb28-64de-4d28-bafa-e1d20a191c10", "row_index": 587, "timestamp": "2018-04-16T11:56:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1750, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0718cb28-64de-4d28-bafa-e1d20a191c10", "eventTime": "2018-04-16T11:56:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: B0LZO285vhdIuW0y1ePutNtAnfB1DxMOH0CXCt8EgT5c1cBKnvRW95Q4bycZUjMxfiOBY3VUK6ceegxiTwjXRv63jCQrqlOsl_QJdCWSxEwjXM2st43DoORLR8R_gbhvtMFoOELXyQF85a4tP23318a4pJ3lfQz-xSvObH13G_qYS9j2xmTHWaizr0m9KLlE2Wh4MCZGQufYoyrbJB0PNVgMrvUouieyaexJyQ0AL-6lom8-BJZZeHNTM5Va8lH58chv9qcrNn9JvLaT-SlKW_effCeXvwKhLaoWYK-Vfagkb1_zf5djpHWvgyGpi5iigzyu42eHVYAXSNjN5uhkk8l-USobNwhx8_r6gktxpkwEXsfWHM_il3V-_SYtG3w9as5_tywvLzBNwa-6fzeie0UIdCLf2rlQsD8xzDKx_RijtJGmSN5x3EXHwQ3k-4iKyRd4bDrx8P78GikOGvxpqx9_TFtgbzES1GXtzWm-8F6JlXTsOenDEKAngsnBCCO5cTGsxNxKZSseRA52Su-tLO1tdy4dQyrnA-E6FMeka851rQje_c0sv_gBY8DbkpslnJA31eH6AT4XsG-t_IJNlRqQnjuWPIekEyIsBJbDNbj4v_KTONL6kmNJhxITRRl6g1ApsW4XYK3T2a4Frg0sSMSaP65TUu0lCw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bda0140-be06-4fc8-bbde-82d602a7c963", "record_id": "flaws_cloudtrail:0000588:3bda0140-be06-4fc8-bbde-82d602a7c963", "row_index": 588, "timestamp": "2018-04-16T11:56:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1751, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bda0140-be06-4fc8-bbde-82d602a7c963", "eventTime": "2018-04-16T11:56:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: P5YTSeZh9R3OHDKIpt6k5NXtnDnh1xlOreFsSUiUXR66RHMT0nN-UVAQzk93ZYzOwczl9tUBsraeKhNnD3o6NXMeOgkvwMb657YDhkyRdW3q7zZQexOgbM8ywywE64dR4Xy4QTOyGy4CNtzKvaZvvjevFOGwqlv8LCvySlU9IbooAQdCTi5fnP_AEDqgNGDfbVzrlCWplY7PyohsGCfGICymX0V-QVWuCEqNmqYgvGm592Oef6rvwwhmienZ2UBgA27tdJzDUY610L0h3MtadtaARS7KWZ5l_oUD8RzwiLFuYAkx2yt643ehVlBYlzOgGvqZNB34Xuv_XQa72PILEU7SC0UuDEjJKcLVFVEe4YEegJrR6zfPsXbyxmpoYQQg-dKoKaC6hW8AADwbUVnJU39XSCXqk8cdUqTZjBuvS-Ph1F9TcZTj4beZC0JLkwOarOO4NVYUERNicgGw_ndhCFqRByElnG7VuYj0kEOrEc0oXGmz74oEv2GEo1jGaU2-pZabgf3LjFuVvsqs8jRfbcPJvF-8xNvqaDRdJ5WMq5IjMmcBv2fl-g6QVnpibzzCsFBoa5vKTI457TZ3xC85qIBUOfqRCjYCDdOhamLDmT848M-HOmxq0c4Jb8aZK3uQNJcITBLWx8FlpQA-KXOwnoypuBAB3T_Ug0o", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8683dda3-e6ff-4b0b-b38a-99e83f150f1b", "record_id": "flaws_cloudtrail:0000589:8683dda3-e6ff-4b0b-b38a-99e83f150f1b", "row_index": 589, "timestamp": "2018-04-16T11:56:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8683dda3-e6ff-4b0b-b38a-99e83f150f1b", "eventTime": "2018-04-16T11:56:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: WDYy_FR4OvfiJCIlLFCfZXRI5ThYLG9h1EaK4e4HwZijyQsKEIftml2rcBBFDXyD_oDTqrQzyU08--ixPMelGXRZyraarXx1dFpu5F3lpoZD64NOwPIDbbI2e7mbCg2nAQeO7sFkkesX9aKZgH67q8h2tNw7QhvRrHe6Zib1UQikTYmKJVMGQV1SWxQRbG05-YX1davIF0Tq2UzPl1dZToYth_NdDHWggyqiGh7iaBhmXxoWR_BgAldrS_Xqt9tb4TQwzm9d49Du5rxOYL_iWwEbnMv47VUhenupi2BzvT-uv8kjvh1WQts5FHR6hvXIULjjvL_dl3SZ8l9Bc9N6OSgkRIJDeLHY3_IHD5mvhORuKyUiIWt86lvgbSCS7GGdN0Jc3kZuhcbOvXteAsueOy1GIA4oHl8RztiVOyBvYqP_k5HwxeDstrRy1g1OAb7AflXwtbkh-nBQXDlq2ZY4WhUv4nSaiU23_q9Rp4z2QcYIxnUQd2Pwkp6Yn_VAKaksPa6osjtMC2K_T6WBrprtDn-PIUi_tqU8rqNk30U8bu9qdxspRenMkhDzzRkq1j-GySTLs7NRUKl6OLZSztYNxMmDYgVJpLFe_OhRiB3Uth0Iu32gpzNcHrxv5y-5s9mtZEy0v2nER60fTvpl4BqEsyQ3FCR3j3josw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "827f075b-aabf-4685-b719-6b3bd1e477bf", "record_id": "flaws_cloudtrail:0000590:827f075b-aabf-4685-b719-6b3bd1e477bf", "row_index": 590, "timestamp": "2018-04-16T11:56:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1743, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "827f075b-aabf-4685-b719-6b3bd1e477bf", "eventTime": "2018-04-16T11:56:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: VT6FB4a76hiyLDNjdKTNvXics3KVSecmFdvZDOCK6e9gkO-kAYb3pz0VfFnG0JC94Z1ZBN1Ca6rqv-T5L-ZgPbF0w3Rls0ZOLsCn_o80LQc6-fFbyc3xlA3e_1RptkvpB6Ug8Ao_FDwJypudeV-gMcgSuqya37zxBsYsBgXvtxE85FJCSUcJFIvmTkfB3m0R8CxTXuzdKh0APCiQLV7vthoxeSs8AASibqU2hVEZobTnKvWKo2noGdXAjXALD6YVbgtCkdH_wQESEtkE1pjz9PduiAo7geQUYASzfw_ZlaWVC2c0w-wXli5aJ7SC7MRZ4RD5cD5rCCC4vYlM1G4d_rCCT6s1mkXMpamddM6igK5GwTKlnwHcafpsQ7S2h652QbCOJque8_NnvfHfLd2upwrjcB8YXvTCyDk41qR1hWCka0J1s6PJ6rQfasuHpFxrysggFNwG2E7mTYK8d9XHq29g76tGvKmvq6OqBJo9f3uR6YaqJqxt7VLv7EZySH0jmtFuuHFEoiODbWoDLKqyB0SdrhUEWVcgg9wW4WfUJQxzcvl4MtH1NUo1cHllUGN3r07-zi7E9qPj3pdkdHbd_clFGU0IaPP0uJkoJu3tcN8zMhu0KSjFN6--F2NI2y1um58tk1iJyGnhGHIvW9uia5XY6kJV5nk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-384e6ae0", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a34b0ae-f2db-48f7-8089-20f65f73d062", "record_id": "flaws_cloudtrail:0000591:6a34b0ae-f2db-48f7-8089-20f65f73d062", "row_index": 591, "timestamp": "2018-04-16T11:56:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1751, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a34b0ae-f2db-48f7-8089-20f65f73d062", "eventTime": "2018-04-16T11:56:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: TjC_QBwAhUGrcK8Rts6aorkh6IpyVhZm25W3g6iSXW5c64E-htfXNUfakDP7YJoz5xp1-YkboGW_od0ho8DS1MpJeYwzZhrD5m5fjN1kAIPd14RRBHPLJlezh-m52ljzfAW5gQChsZOyMo1EbDLoNUatu4UojuvIblDvyH7jQMdSXQKgXHEvF9gTrZdRedCUqyk2dB6ppyINdsWix-CRlsHnnuxI_qs6NQ5gK_LKwo6K5feAUd_W0YzJ0p1KOeI-ZuoGQyyP7zL7hsjDWLSaxfYmDzIR5HRoFOQRc4HPn_ovOK4tFoGLtsbMPrPiNT3Q353ltAkrsWLjeCq-wVo75lLY2jjzDnQ4BG3JVtNpnO-2AEG-rPMfNKIBUz3OiGmY9pyHb_7adrxQH-mBI40vNI0RAyiEz76vBVmmzHobEi9ct0Rm9iYML9sDWpno2LFhQMn0gwSlPkkY8N1NUCga669RLbPS_4QJsuaSRjdWg9aQtcx3wUGbqftZpKlx8PYEQSmEG4KJh47HbkwhFFfOZv3QPkS3yLStBJ5BUvbdLgu3dxmVeqAXam8owYpKiRMioHPkPeRlc7A76ej0mgxpnziWYshdDkXDx761UXdHEY63VnO_DlpFP7be8cAX6fThx8WjIVPV15_BxvhGegE0baJqUEhdyNtNo9g", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.10xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae27cb1c-3be6-47d2-889e-95e398248e88", "record_id": "flaws_cloudtrail:0000592:ae27cb1c-3be6-47d2-889e-95e398248e88", "row_index": 592, "timestamp": "2018-04-16T11:56:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae27cb1c-3be6-47d2-889e-95e398248e88", "eventTime": "2018-04-16T11:56:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 5JcpG290UJ0w3EvS33AXcNIrOgua-NPyfTPbTCogKEi_1zWzBCvwp5yH_LFFnELEZOowP9NgCdBMg01j7JciF2M9yxTWdRo2blWLQ0-VohkbI-_acQv5CEvgwN_7UyTRtNkgxbFW1zvHgqfvz-fS7o9xIVLXQNUhqkCEdhhP1dDl9hdQaIFJLRDtKtt1tP71NFhIoYR-qfEhUvdWgMPlbPeSSz74eZDdeHfmqVaUpAiCLkrj-QtXcKI7mUKa0DlxieTeUrSbcV9khCXvLTtFH3t1yfEtrlXCKky_5lqCc6XKNvvpEGNchJuBZqF-VCV3vUV7czCGPgjxqxGXN0Nefb2PaKlkfSdUXejzO5cfVHx8VnSWxZFOa1BiBiG7F2Tckj3R471bJgfVl49ShW-kn3GaxdFiYt1vuUNBtl8fEExFACVeFfaioZa6yz5_zvR2K4uenR-w-hCLvncu-vrwBSSi4iXqEBtZ-5fqrJX877vMLfF9oSoGu4ZLPik0dOolg3JqIpz5NMplBg3CL-cMOmzNUk9cf4LXlX9_5rbG5p6xFDhXUlXDz0IS7HKjQ7_4O0PuA-iGCjrbfrT46ApAjnpldbgKqV7t0qTapISZlh43ZDv0eHVHxMSlbvtmca3i58hRak33rsEFubd-fouQvlV6ELNEipHbiA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.16xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cc179d8-33b0-4b84-b8e7-7feed6505f41", "record_id": "flaws_cloudtrail:0000593:2cc179d8-33b0-4b84-b8e7-7feed6505f41", "row_index": 593, "timestamp": "2018-04-16T11:56:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cc179d8-33b0-4b84-b8e7-7feed6505f41", "eventTime": "2018-04-16T11:56:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9b2b786-e88a-4e20-bef7-e50fd39fa337", "record_id": "flaws_cloudtrail:0000594:d9b2b786-e88a-4e20-bef7-e50fd39fa337", "row_index": 594, "timestamp": "2018-04-16T11:56:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1750, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9b2b786-e88a-4e20-bef7-e50fd39fa337", "eventTime": "2018-04-16T11:56:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: MWOf5DBmScSKS7QnScYVRXIEQL2jXuhnA6NaUTc3pQr99NpyD8bwVFc0B5Hast770ajDlgCq1Dbxd8qqOKMJ3P9rlja7AUunZ025CYKUYixTdOO65s1BhaI52TAURjlWkl9DWdquaxsegwcz_oCDslpok_-Dq6gBL2nlJNfxgMMenEMv7jDZCDxsmjX4CrcX6k8WfDRuEIQ3WZf1y4bc4Jrhpngn_u9RMTVAhviSgqIkc3abUQbLTs2YOVOhHoOC_pvJnFmgwDiB--ty_cNidVnQue6rLHYnRc5ZxnwX18ZkejIl6wD_7mDhK-ZYFPj0g5dDTs-BWvr_7ZZ6_KaGM1PT-XvchOztc59IUEH0tPloMXFXSjzkAHAvVZ4SyEfPIp118aw7ySsSS0P5JuvEx_e0dyaD_wmaWqQhsp963ZcwPpkJC_zBS11Z4UyTDAc65g_G_3F8BCr39IXLzs1HEViAJoeT2U9z3OLJSPRPT1E7htpKBp-rkj6vIlskLptDKeyah8nbO_-FMWMgSZM47hJvDE3fJ3HX_biwFS6jCdU1jvp9PDgGqtzP_crJNJ-_cmvi6PcWHlWcDgEKbg7TwtwiCGqHRLfW0pa1eLmziRZSzgCmN43g4f9AF9yRVElySQk1-6E37DwrHlH4d6rhuTlJYn3LOy4ZHA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.9xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "855bc81c-b551-4347-974b-016d8864b5eb", "record_id": "flaws_cloudtrail:0000595:855bc81c-b551-4347-974b-016d8864b5eb", "row_index": 595, "timestamp": "2018-04-16T11:56:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "855bc81c-b551-4347-974b-016d8864b5eb", "eventTime": "2018-04-16T11:56:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: iSackmnoSOlndopiSJLW8LNcO9tXCBCTVGB4rHdSw9MTvjprDU_NCUavqG3tmsNhn5rebN8SkihOwLoY2oqrDzOagsY8MzKfBoUxsf0u3eqsQxM-RGiDFQjXM1FXJzEY5I1L-bm4N8_qi20SGbwB3jN9s9QVvyiokVrEl5_zhHeGdweV3PY35n2TnS2q5Cxb84BoBSJ7ClfMGye-qFBkmunYUhbvtb0aavZ1tv6teK1Oh--P0ix-iclakB2zqh63DyrJDMIT2UtrSyVCgOM2m-FB6v8DMgqFsy1fDWTpbb9mK1yH6Yko6iaF2I9T3KN0l-DTY_HbSKkoe-lxcUeGGUcO-xCJomhLK6Utsed4NwnjIvZqbUlYiXFp104joUUiC6SOlF6ulcp-V-O9Lhh9wPpL-29YHmkREQarTFvwG5TpIEYRZe9XZsw8q2LQyn2b_Wz5ENRvapuugOdxNcu4nUOMHoPGTqdrPZPfUKpxbnAnk5t8OBjrv48HkgZG2HTa9ImA5U94IilS6SVLWLs_87J-VNhpLYBy4uLp6_1EC0dv4VRgAgh8evyEV3cCIo039qXlD8Hr-0ME9CvOBWUs3lsQZ5YxFBOASVC8m7-B8PAc78yoK0C812dhaJbrzaiDSP1aLy5V-MeVR8z3JZLG_PcqMWB9L859AA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f39b6ae-e36f-4976-9607-a353446ce", "record_id": "flaws_cloudtrail:0000596:6f39b6ae-e36f-4976-9607-a353446ce", "row_index": 596, "timestamp": "2018-04-16T11:56:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f39b6ae-e36f-4976-9607-a353446ce", "eventTime": "2018-04-16T11:56:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: f4dXQso5eqT2fIAK8KSFL5Q34ka6BsdUF8dqm5vWVlBJEvBJRWPvLasfIo7qmqMuZB48Dt1IUqhK7xfYd68qU4tgAP2nDEzYeannGSX-1W_S6i7V-9Z4MUqtEoEy3PdVpyCa7XdtxEbfNvqiBYeZvim3cnOjI1fFGRrz8Fv1XDIxhUFqmq09BSIMxjjT9AEOZ3G1jjd7DNQmgaV-aBqWu_rfaFgdIemRX_dwqjjMynvRGxpQE2plxFS9sP6DBmntNTbui6o-za0t3iibErIYANf-4mHkEo-VoKB0qbeovgrgX2FcX4-86f-X-ljaAnsKGbOF0T8LsqTaBsHZ_z-ZH7LEN-nn5Yf60xkeOl3Or8T4_GUy8Vl9MGrCi1clGbOofTdB83KlnWqvBxY9R-b8eq1U-w5CMmxluZ-MtRRJjrUluAvBrD-KES14fPXTQV0hibkpaniY7UKzRxn4fxQ2lsL-4fmFRoleETq9JL2xpjYOqReAipIqhHvL04U1ArHFjNfHtX395tTLO7ev1pWAl7qbqg3n_Cz1_cysB6XB_Q5FbrDah-p1xL7088Cf8Q-817dAq1F-Oy1wmUFTWkpNZmmyTEb5fP3kGowKbjNqpLi0ZMhWg-skJv_NMBWmb58VC1FB4qsovurjh2096GcGVMulUtkdKg_UKYY", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.12xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f81e248-19b7-45a0-a48d-73d6540b17d8", "record_id": "flaws_cloudtrail:0000597:0f81e248-19b7-45a0-a48d-73d6540b17d8", "row_index": 597, "timestamp": "2018-04-16T11:56:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f81e248-19b7-45a0-a48d-73d6540b17d8", "eventTime": "2018-04-16T11:56:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LETbNPX8pCu3ckVRq61kkaF7jPmtntsOZyUeTxjueIWpIfRwkA8ucnw8w1ewjnod5idavIfa_pghV264-mG8K_YcSR84K-oyqR3VOe_oVJ5zb2SSDA5eW1nkCFB71_F8lJyqyiHFseIJP-u2quf_dRyIXZCVpzdGmedNlC4-ARXuiJkFC-_hPwAnQJy2BhQEfDgBEaKTgVw-pNMuxjC9Fs-rzyADDgzTmdCSWDTMXui4pJiRiMipWzM8FiCGNWGYXOegqJzIfKgxEihGzKAXk1VoHLY1RQd3_7thlrKltgnnlP-mN91x6BKRtybZ3bRHH0WVkG3knBqHh5crDBz8cZxtowHBBtuuuV8VipYQr4AWp11G6T2EELAqvEQcyzOMef3Pg-gCVnJHI_PCNaMyjzDt0TdUaxhX1ELanDHvHuiO0EmGtEq4uP4OCLQ9eymY37gQw6tlrNSv13cc7qg-2A5EyHV6JpdPGpP_3CCPc6sL5ZW0JUOTuAhCGImRwn7feQTWtI_uiFujnrPOP0KLsFb7ZAletMLnqQVDKJH4LiVggbA3tCRZUdfypFSaSPP6Hb2NGHKD1e2_ux1XF3EpbVeLuS6UjXyPWlhwaotRI7KSOJEv_cdHmhBVrgby1HPuRBCefaUgrXh31ilVd31cD3P39U3zi2OZFg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c02f626-91a7-4730-bde9-08e967313a990", "record_id": "flaws_cloudtrail:0000598:4c02f626-91a7-4730-bde9-08e967313a990", "row_index": 598, "timestamp": "2018-04-16T11:56:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c02f626-91a7-4730-bde9-08e967313a990", "eventTime": "2018-04-16T11:56:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: SONFS8RnXet0kAL0SZ4zlxQntGcXYJI1kC8vMu5xqS9raxSkvXOhl-5D7IRZHCcF3C7Gq7q26TTJjAY1kWY-jaxxUg2fWqRxVXg0-F5kjGkN9VdpcRetPtjjmzgDRSQM8uw87emdrOMRx8_RD536uNsgGoINZXE8PFlA9qgiog5aJgpGY9URbga69fKl0Nkr8cHSvEuWo3ApKZ8mSQ17xIFIksy0Y623Z-q-8BO6qS084SMjxd0bf3-UENmBiLGFFObUXz71hTrZS_40oiUtNJy8y7NxO8qka9XZ4Zc9CUsi6ZPqavO4goTqqJDI4XkkNEywYRVWEHK7R8ryEON-qxAMAgwUCUaBoXGSrvo1qm4hSAsSbiL7O9sx37bOlyiJU55stkmqh3Gal8ktTVf66_JMsjWCEkFy9zLdz_eXbmeNsmBaTFyk50bsbpiQ61fLk8oj1Mw_elmHpl4rE1t9rq7xzz8djSztKBiuOvJ_wcmQTGm5k60PFMWxYnXkineRraKAcZaq0uJtCXjzjs6LiTFgIhG1RvNfF1-Dfajhdf7ykyQvbWUKbXp4qQ6CgDiBNRog5PyHYrAFZALia10gv7DDAe3vT7F-YIiDVhXgV4ipuRYyqnAaJ-ZNzkXdWz04cV3bPN0U-Kcm5tJ949oR3LqDiZl0n9km", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86f8a20b-9464-47d6-a198-e05a58a975bf", "record_id": "flaws_cloudtrail:0000599:86f8a20b-9464-47d6-a198-e05a58a975bf", "row_index": 599, "timestamp": "2018-04-16T11:56:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86f8a20b-9464-47d6-a198-e05a58a975bf", "eventTime": "2018-04-16T11:56:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GTWXQBwu4lmzumyP782JW1lmZZcAspWzNd2TjOL7dpJ4rwU-QOmeCTooSzkRXBW6jzRP9691Anuab0cG7b5R6VWd5dDE6iDrkaHWwXnN4CYMOo_hzKtgGH25cMv_yFkH0WhZH1ZXhk-3LABFgKDcaxlMVlt1XQIok1LKXXIvfKYO2mFTuJ_a8MJYI6OCqlRWe5N-vB4glzdorSxLETQGtejOPdobnGxANwKoUJ7TRAFv0fTUx6XRqLGDVHUqjn-ssZS_L_Y8l9uyyHDyLgjEjoW_rrhzG2a0y1B3tpFJzbpGuULFAz6kGy3KGxXE7YInpmqhjkXKRozttZ2ISJPjrio4UuhGntnrnZroji1_fyC6R53UJqUVHliaauchJHX1TNpcRuY0sUZud22NZVYgXneRrp5EHBV4LEPZ9VFYqYcBYS9PUagK5zFic7NdJCwmeRvNxzSvcXlfdKUlM-2RwjFDLWnp_Kykz5-StqvF72elaH9skwMOhvxuJOfBZRHVPXqJa22VTjFcqe1cQT8on2_T-FAJN42sWZzEp1VfTNTcgIO7kizp-_qnW40wD85DK7Yx-DkBZbmSfed505wr8xEtq0B-tju_dVVWyxRBl0b8-3y5LQ3nybPjQeDJGauHMqWw-Y0BM-s4bwZYvoB5RQxUPIMZCXNP", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e6ac2f5-7190-470f-94e1-7658bdaf7388", "record_id": "flaws_cloudtrail:0000600:1e6ac2f5-7190-470f-94e1-7658bdaf7388", "row_index": 600, "timestamp": "2018-04-16T11:56:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1750, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e6ac2f5-7190-470f-94e1-7658bdaf7388", "eventTime": "2018-04-16T11:56:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: wQQDoYLUXJ7xTYWG-8DnoaP-srKDDdjDOCSkRdLAMT-ETf-T9NROjdFLYmB0uio8HMaCLZQRt4nm9_v4efLoROhC23z611morFCZOYi3oE92fi1kBk8JVER2WR5qn7rmUAeXQ-FxEk3cNlgMFLxR0lYt6IjZlENITp9xr5MwTOsB8iGSxtbhg24POTwJ8GP99XvI1oIPmBbKWNDWm5ZpEPeXaAqw0xov_oK9z_HtRLeayBAHvPBJogo-v1di7PWokwkAF11ceXv_6kTnLFueoh9_0zGWY-yHo6xnZcvOUSKwv5iG9mXYFimSZ95s4dhF8-nUigygPE_qPUt4r3vfVWBkAj18hCpy1qKejIcnfT9Bo9Y3266lYCBPKGvD_0XgqAQ_Yl1OxDqVb1LfSupFdoH2z6bGEwMVOH5_t1FuPQKha48JpICxE-BLO7VS0yagAEVd4CHsAbK0BXb92w9rku9HvpDIFX1gs18LntSxp6kcn3NbmCHvMzHV1Enor-iOHA0jRz8aIvJM7ipL0aifpilZ1GIUF-sgszMKcnKoAh1prBZ0FGVNTnQGqqCFXD5_QV5eq3csWaZjwZfsCIcUffNYcFl6hetx-NRyOb3kLghOpq1JGVvbjHWd_mcn0qHjuHD3Rt1962G87Dw-4wwo4LZYaJ9Nb6PyeA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9f5147e-47b0-4ac0-9fa5-0e712d36fa05", "record_id": "flaws_cloudtrail:0000601:c9f5147e-47b0-4ac0-9fa5-0e712d36fa05", "row_index": 601, "timestamp": "2018-04-16T11:56:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1749, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9f5147e-47b0-4ac0-9fa5-0e712d36fa05", "eventTime": "2018-04-16T11:56:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: w9GvetETALHTIYyhyLUY5D0jpESxXRJ468fk4PjUwzGi7NXCxjioLv0YUyIwLK5_03S9_kGk8UFXyk1RjbpApyd0JDM-6RapRUVubqrBK8_RJsDsw4p6e4iqEzN9kmzZGDZjTNM8WhzWUiWo8Owcj515DPVb5nBTetI6fgtmYWNKJhfZrPXorb53s7E2kCWCwWnkjWLUI6vGSMPnNHq4DK4mcdoPABdEpsYAqLxB61Pko9D19gba-civVsVMnYSj8LmFSYctYsn2Ssp6RJSFOdXO8fvwny5_bfKBnBPp0Dlg4_NiwzX-GsTxGInFuJM3az_Jkg-JO3W_q8UXGGwuww8FjY9Y-yMp2HPR89FFH4LeXvHoFw2npT0FrMO9w1bp_1Exc4ZWUMnJ7PCeYwMm2rHxq4XSwi5253r8yiaJDH22Wgl_dkZgukUQCPd6yq-6Z7cMC97fxzuQiUrNi6_F2qPfRTY1PpfjLaFgL3QtFnkpg_tvIxzCLAFuR-nQUYZJYRdkVRplk0eXj0RHIafvq5KKcTPAkX9NoenxElxhdNPbaVHqK9Uwpre-yz82zZLU-IfDHs4rr1hw3cVKcEscVB4y3FX5ma64OOmWwZ1EEB8uEimHE3frKVeot4LiVALj2IfXA9Y5oSFb76nh3zHcCmgaXgYs_3j_sg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f8e6062-bfcd-4c90-ae35-82193bce799f", "record_id": "flaws_cloudtrail:0000602:6f8e6062-bfcd-4c90-ae35-82193bce799f", "row_index": 602, "timestamp": "2018-04-16T11:56:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f8e6062-bfcd-4c90-ae35-82193bce799f", "eventTime": "2018-04-16T11:56:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: kRM-onbQLHi2FVOJK6ydFYDDNcVy1mB6KBmcf6Ykjza1fys6fnu-jpZFQoVG4zqBlcz78dzWkcyzhwknBztA_j89GretWx9o0E6hp370SMQtvUMUflWKueuBU0OToi-kpOV_G-PwJyWjvQ690PzSr-NG62JP5675rp7wQmEnC8dX87PYSjXQUGOsRede-CnBqG0agNpaSTsPZqFtFnkmhDkXKFRFNJjLi628cHG6xBzXVM4YOrdwv_gAao0gH3abUoR0ioK7vGMy9MOs3VOH9skqMjUOgmcMNCoA2j_WkYWknASPaCIJ1IUX0MLZMAOQWRcCmNHDcHWIWZPeTpTYM8QDcFLIFLQVaHE2ilz-2ONngy0Clf7kZvuI_lWVncxh6DxnCnMAcWWs4wOwsG8xY8xHrvti-ND_2CHmSa9DuE2hTnoNTdjDrBFn6JfjtjcXsNLTzhKR_qcYyCZXjGlxTYzSqjEEEaKLH7AyxCDJr4IChx-1ZiAMfr2OVGEzmr0oDtKtxuHgUj5bUCEibuWfi7OgVwo0ObtXxy_GxAySk7s_Bik8KftZ-r6kbe4_9sApEJ2PCGxvL_hnNtgvWoiGBkVjPnVgRrbN2MSZ9FiPOWR0y4HfofvPYt1DOiwumBLL7krSxxQi0Lnv11IPw7kDf5uhYLWv7yMx", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b57330-9e73-4103-9069-6be2d92afbc3", "record_id": "flaws_cloudtrail:0000603:2b57330-9e73-4103-9069-6be2d92afbc3", "row_index": 603, "timestamp": "2018-04-16T11:56:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1746, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b57330-9e73-4103-9069-6be2d92afbc3", "eventTime": "2018-04-16T11:56:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: M40FZZWEGiVma87c-MY3-kuCda4rzpj6o6wm-8QrfY8yYb6VWq3J06FJD0z0uAj2YHA-VV61O4N7OYTuk39YbQzkFYJg2LQ1_Tq9ktNtLydMx9bvP42tWgIlzhfhHvBpYYFH4gqFXx3MUtCgmXd1M8on7cNzXp6eMdX1h1cg8lWU-zVCoL_RZYtZagHn8z5A3unjfl4MjzB_bEsX1PNzoBoc1Et47qqEeCQsiuK9bimoDM6goFgTNKUeNuUpjh0zXWNnCi3N-9eorwTnWqBSVmwqKAwTfpXEBRQk_3U1HGj9hoRh4JOwnQTfb_mn6AZaRoa54pEkMffyQ5_J6tK7AwlPRAE-ar_lOmfPskCDJYgm-cPVAz80Ji4GPhwgZ1ie4x_F6xjBn_bMlypd680FnnW5PnVBci-wKzGWP9TRNi3SsAEJ0qIU4poUkn4HculWCF1DbB_dwUUTFpZoTo7jFVEspraiq7N56ZrMtd4yRK75dITJUO080lKvFbskRRXMwdj8R0TVItK96m0BGI3wk7ommHp9bKNZ1LqOJBXMWtoTOKJv--NsKIQ5kXw-Cfn98atVUTAOUXXffhhmOs09V72SP4bqK1y7hME23Aog442YoKWkCFbqxPuo6BhbpzhnJvg3p4ZcWsp93XMaFe1yCxHQFE-tBsP5", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a038eab1-a771-4ace-b3c5-e5a304705f", "record_id": "flaws_cloudtrail:0000604:a038eab1-a771-4ace-b3c5-e5a304705f", "row_index": 604, "timestamp": "2018-04-16T11:56:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "145.121.184.112", "user_agent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a038eab1-a771-4ace-b3c5-e5a304705f", "eventTime": "2018-04-16T11:56:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "145.121.184.112", "userAgent": "aws-sdk-nodejs/2.221.1 win32/v8.11.1 callback", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: iT4xvDPQ4xGgrYNMU8NhnIZHGfjorh7uAC2UetAA6HQXJ0pC0afnFaFoBVJD2jFOAkKigv0_Nn3zT9GVjHeee5Z_aEHbi4kzB8hMMsJE7yPuEBe_Ih5xdGd5yaA2yIzrf4AaXZyEOJwF21Qrgs12hOoFHWNePpj4QxaS2lflawYIvvY0Jev4Kl2VuN9CWQvVD8dw0cbzyyMLIICXp_qBKXFj8ULunKHQW1t5AQaP1t6ATnd3YvcRVKEAesU7-Oed_T_h0BMXW1XW-t98ynb_aSXFQDt235MwoLlRqplJTf7VBE9c23yVFwG9r4EEqFFkLwILWnbOLW50vG-RkyqbhacM_6ZbRMIdRQOfzyV4NhXLMYFpbtavXnSq9nnD1schysAT6y_RYMfLZ-sETWy9uqpofJnPAZK6IRrVK4WhSi6m0ujs9bvJ8Oheg8sY79mc-knctlexCAEjGs5oMIARbbP1Q2j0fqtKaBecT03PQcJkVkUttqInMPKEQNM9HQ76_P9S-Xuj5GdFI7tBOXOdNFzugD-8l_6VFfMYm8Lcj4yC_V0rh_IGEtJuuRDZK5F4rrL73nP52SfADlqmQvWuDquMuoStPRdYyD6B1BlmquQ6VRIJMhnBeG1Houyxq8cs6NadbVMVqFkao9cbnq02wpKEYeyNH4UOsQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5917248b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "instanceInitiatedShutdownBehavior": "terminate"}, "resources": []}}