Task: attack_reconstruction (flaws_cloudtrail)
Prompt: Review the CloudTrail records for a session-credentialed principal that moves from storage discovery into object access against an S3 bucket. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain you reconstruct, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f83851d-c5a5-4ba8-bcfe-047c12a5e79f", "record_id": "flaws_cloudtrail:0000000:8f83851d-c5a5-4ba8-bcfe-047c12a5e79f", "row_index": 0, "timestamp": "2017-02-19T23:27:42Z", "event_type": "PutIntegration", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f83851d-c5a5-4ba8-bcfe-047c12a5e79f", "eventTime": "2017-02-19T23:27:42Z", "eventName": "PutIntegration", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"resourceId": "kamzugakt0", "httpMethod": "GET", "putIntegrationInput": {"httpMethod": "POST", "contentHandling": "CONVERT_TO_TEXT", "type": "AWS", "uri": "arn:aws:apigateway:us-west-2:lambda:path/2015-03-31/functions/arn:aws:lambda:us-west-2:811596193553:function:level5/invocations"}, "restApiId": "puspzvwgb6", "template": false}, "responseElements": {"integrationresponsePut": {"httpMethod": "GET", "resourceId": "kamzugakt0", "restApiId": "puspzvwgb6", "template": true}, "uri": "arn:aws:apigateway:us-west-2:lambda:path/2015-03-31/functions/arn:aws:lambda:us-west-2:811596193553:function:level5/invocations", "httpMethod": "POST", "cacheNamespace": "kamzugakt0", "passthroughBehavior": "WHEN_NO_MATCH", "self": {"restApiId": "puspzvwgb6", "httpMethod": "GET", "resourceId": "kamzugakt0", "template": false}, "integrationDelete": {"restApiId": "puspzvwgb6", "httpMethod": "GET", "resourceId": "kamzugakt0", "template": false}, "type": "AWS", "integrationUpdate": {"restApiId": "puspzvwgb6", "resourceId": "kamzugakt0", "httpMethod": "GET", "template": false}, "contentHandling": "CONVERT_TO_TEXT", "cacheKeyParameters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "164866bfa-a85e-475f-8dca-a18ceb9fbdac", "record_id": "flaws_cloudtrail:0000001:164866bfa-a85e-475f-8dca-a18ceb9fbdac", "row_index": 1, "timestamp": "2017-02-19T23:27:42Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "164866bfa-a85e-475f-8dca-a18ceb9fbdac", "eventTime": "2017-02-19T23:27:42Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69c738784-e4a2-4a32-88dd-a558187ca2c4", "record_id": "flaws_cloudtrail:0000002:69c738784-e4a2-4a32-88dd-a558187ca2c4", "row_index": 2, "timestamp": "2017-02-19T23:27:42Z", "event_type": "GetClientCertificates", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69c738784-e4a2-4a32-88dd-a558187ca2c4", "eventTime": "2017-02-19T23:27:42Z", "eventName": "GetClientCertificates", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56aff5e3-8e37-4b9c-9142-b68279e861717", "record_id": "flaws_cloudtrail:0000003:56aff5e3-8e37-4b9c-9142-b68279e861717", "row_index": 3, "timestamp": "2017-02-19T23:27:42Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56aff5e3-8e37-4b9c-9142-b68279e861717", "eventTime": "2017-02-19T23:27:42Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "870d72a5-8fba-498c-a267-6bc2e969bbd0", "record_id": "flaws_cloudtrail:0000004:870d72a5-8fba-498c-a267-6bc2e969bbd0", "row_index": 4, "timestamp": "2017-02-19T23:27:42Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "870d72a5-8fba-498c-a267-6bc2e969bbd0", "eventTime": "2017-02-19T23:27:42Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90f0b3dc-7750-4056-83f3-e96ff32276de", "record_id": "flaws_cloudtrail:0000005:90f0b3dc-7750-4056-83f3-e96ff32276de", "row_index": 5, "timestamp": "2017-02-19T23:27:42Z", "event_type": "GetAuthorizers", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90f0b3dc-7750-4056-83f3-e96ff32276de", "eventTime": "2017-02-19T23:27:42Z", "eventName": "GetAuthorizers", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50e37de6-2dbb-4ad7-ae44-421f3bd3bbad", "record_id": "flaws_cloudtrail:0000006:50e37de6-2dbb-4ad7-ae44-421f3bd3bbad", "row_index": 6, "timestamp": "2017-02-19T23:27:43Z", "event_type": "GetClientCertificates", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50e37de6-2dbb-4ad7-ae44-421f3bd3bbad", "eventTime": "2017-02-19T23:27:43Z", "eventName": "GetClientCertificates", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99b18c4a-f91a-4c5a-b676-a8bad36ded14", "record_id": "flaws_cloudtrail:0000007:99b18c4a-f91a-4c5a-b676-a8bad36ded14", "row_index": 7, "timestamp": "2017-02-19T23:27:43Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99b18c4a-f91a-4c5a-b676-a8bad36ded14", "eventTime": "2017-02-19T23:27:43Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "171f4263-cc47-41f2-b3e4-2d28216f611f", "record_id": "flaws_cloudtrail:0000008:171f4263-cc47-41f2-b3e4-2d28216f611f", "row_index": 8, "timestamp": "2017-02-19T23:27:43Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "171f4263-cc47-41f2-b3e4-2d28216f611f", "eventTime": "2017-02-19T23:27:43Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e847bc20-8cff-4fd2-8ee6-54df381d8638", "record_id": "flaws_cloudtrail:0000009:e847bc20-8cff-4fd2-8ee6-54df381d8638", "row_index": 9, "timestamp": "2017-02-19T23:27:43Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e847bc20-8cff-4fd2-8ee6-54df381d8638", "eventTime": "2017-02-19T23:27:43Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acc5caa4-a88a-4071-8782-c0ec246dc367", "record_id": "flaws_cloudtrail:0000010:acc5caa4-a88a-4071-8782-c0ec246dc367", "row_index": 10, "timestamp": "2017-02-19T23:27:43Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acc5caa4-a88a-4071-8782-c0ec246dc367", "eventTime": "2017-02-19T23:27:43Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9035d12-f418-4303-8d44-d15b92499", "record_id": "flaws_cloudtrail:0000011:b9035d12-f418-4303-8d44-d15b92499", "row_index": 11, "timestamp": "2017-02-19T23:27:43Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9035d12-f418-4303-8d44-d15b92499", "eventTime": "2017-02-19T23:27:43Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f31119f-6762-49f0-8b01-4eba5b477555", "record_id": "flaws_cloudtrail:0000012:f31119f-6762-49f0-8b01-4eba5b477555", "row_index": 12, "timestamp": "2017-02-19T23:27:43Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f31119f-6762-49f0-8b01-4eba5b477555", "eventTime": "2017-02-19T23:27:43Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48f15c8b-3520-49a0-95a1-f76be3b788484", "record_id": "flaws_cloudtrail:0000013:48f15c8b-3520-49a0-95a1-f76be3b788484", "row_index": 13, "timestamp": "2017-02-19T23:27:43Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48f15c8b-3520-49a0-95a1-f76be3b788484", "eventTime": "2017-02-19T23:27:43Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "013645a44-fc26-4ac3-9da1-b174c5e7ddcf", "record_id": "flaws_cloudtrail:0000014:013645a44-fc26-4ac3-9da1-b174c5e7ddcf", "row_index": 14, "timestamp": "2017-02-19T23:27:43Z", "event_type": "GetClientCertificates", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "013645a44-fc26-4ac3-9da1-b174c5e7ddcf", "eventTime": "2017-02-19T23:27:43Z", "eventName": "GetClientCertificates", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79509df8-9765-4063-88ec-15c2efe4cd84", "record_id": "flaws_cloudtrail:0000015:79509df8-9765-4063-88ec-15c2efe4cd84", "row_index": 15, "timestamp": "2017-02-19T23:27:43Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79509df8-9765-4063-88ec-15c2efe4cd84", "eventTime": "2017-02-19T23:27:43Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9d55f34-7271-493c-a422-bfba558fbea5", "record_id": "flaws_cloudtrail:0000016:d9d55f34-7271-493c-a422-bfba558fbea5", "row_index": 16, "timestamp": "2017-02-19T23:27:43Z", "event_type": "GetUsagePlans", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9d55f34-7271-493c-a422-bfba558fbea5", "eventTime": "2017-02-19T23:27:43Z", "eventName": "GetUsagePlans", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04af346d-08b7-48a3-b5ad-bb606c54113c", "record_id": "flaws_cloudtrail:0000017:04af346d-08b7-48a3-b5ad-bb606c54113c", "row_index": 17, "timestamp": "2017-02-19T23:27:47Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/level5/level5", "account_id": "811596193553", "principal_id": "AROAPGLC1Z54BY9Z8RY22:level5", "user_name": null, "access_key_id": "ASIAQE16P9P5R9SB9FZZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/level5", "session_issuer_user_name": "level5"}, "network": {"source_ip": "231.251.144.128", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04af346d-08b7-48a3-b5ad-bb606c54113c", "eventTime": "2017-02-19T23:27:47Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "231.251.144.128", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAPGLC1Z54BY9Z8RY22:level5", "arn": "arn:aws:sts::811596193553:assumed-role/level5/level5", "accountId": "811596193553", "accessKeyId": "ASIAQE16P9P5R9SB9FZZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-19T21:00:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAPGLC1Z54BY9Z8RY22", "arn": "arn:aws:iam::811596193553:role/service-role/level5", "accountId": "811596193553", "userName": "level5"}}}, "requestParameters": {"logGroupName": "/aws/lambda/level5", "logStreamName": "2017/02/19/[$LATEST]9894946f1ab9245edd1c02c81a11a3df"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "480ba55f-390f-4cca-8096-03e78ff85c24", "record_id": "flaws_cloudtrail:0000018:480ba55f-390f-4cca-8096-03e78ff85c24", "row_index": 18, "timestamp": "2017-02-19T23:27:50Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "480ba55f-390f-4cca-8096-03e78ff85c24", "eventTime": "2017-02-19T23:27:50Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "350398d8a-65a8-4908-863f-7df4536520ed", "record_id": "flaws_cloudtrail:0000019:350398d8a-65a8-4908-863f-7df4536520ed", "row_index": 19, "timestamp": "2017-02-19T23:27:50Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "350398d8a-65a8-4908-863f-7df4536520ed", "eventTime": "2017-02-19T23:27:50Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6371a9f9-7e3c-4af5-b8fd-65605ac05104", "record_id": "flaws_cloudtrail:0000020:6371a9f9-7e3c-4af5-b8fd-65605ac05104", "row_index": 20, "timestamp": "2017-02-19T23:27:52Z", "event_type": "GetDeployments", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6371a9f9-7e3c-4af5-b8fd-65605ac05104", "eventTime": "2017-02-19T23:27:52Z", "eventName": "GetDeployments", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbc059228-5490-4204-ba62-3bfee39258c", "record_id": "flaws_cloudtrail:0000021:cbc059228-5490-4204-ba62-3bfee39258c", "row_index": 21, "timestamp": "2017-02-19T23:27:52Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbc059228-5490-4204-ba62-3bfee39258c", "eventTime": "2017-02-19T23:27:52Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff66e4ff-fc0a-4076-b0d9-2c783834ab7e9", "record_id": "flaws_cloudtrail:0000022:ff66e4ff-fc0a-4076-b0d9-2c783834ab7e9", "row_index": 22, "timestamp": "2017-02-19T23:28:04Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff66e4ff-fc0a-4076-b0d9-2c783834ab7e9", "eventTime": "2017-02-19T23:28:04Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b211955-c24e-42d6-8c3c-b7c795073117", "record_id": "flaws_cloudtrail:0000023:7b211955-c24e-42d6-8c3c-b7c795073117", "row_index": 23, "timestamp": "2017-02-19T23:28:04Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b211955-c24e-42d6-8c3c-b7c795073117", "eventTime": "2017-02-19T23:28:04Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "embed": ["methods"], "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf252a98-7322-4646-bdde-8576ce0b8098", "record_id": "flaws_cloudtrail:0000024:bf252a98-7322-4646-bdde-8576ce0b8098", "row_index": 24, "timestamp": "2017-02-19T23:28:04Z", "event_type": "GetUsagePlans", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf252a98-7322-4646-bdde-8576ce0b8098", "eventTime": "2017-02-19T23:28:04Z", "eventName": "GetUsagePlans", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd9d52aa-996e-4794-83a9-ba583f0ac113", "record_id": "flaws_cloudtrail:0000025:dd9d52aa-996e-4794-83a9-ba583f0ac113", "row_index": 25, "timestamp": "2017-02-19T23:28:04Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd9d52aa-996e-4794-83a9-ba583f0ac113", "eventTime": "2017-02-19T23:28:04Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c38bb51-8e25-48b1-bbd2-d54d164ae8cb", "record_id": "flaws_cloudtrail:0000026:6c38bb51-8e25-48b1-bbd2-d54d164ae8cb", "row_index": 26, "timestamp": "2017-02-19T23:28:06Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c38bb51-8e25-48b1-bbd2-d54d164ae8cb", "eventTime": "2017-02-19T23:28:06Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35b92163-c886-4a53-90d2-c4fdb2b3352c", "record_id": "flaws_cloudtrail:0000027:35b92163-c886-4a53-90d2-c4fdb2b3352c", "row_index": 27, "timestamp": "2017-02-19T23:28:06Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35b92163-c886-4a53-90d2-c4fdb2b3352c", "eventTime": "2017-02-19T23:28:06Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1964e549-ae20-4c96-adc7-c114de358a27", "record_id": "flaws_cloudtrail:0000028:1964e549-ae20-4c96-adc7-c114de358a27", "row_index": 28, "timestamp": "2017-02-19T23:28:06Z", "event_type": "GetClientCertificates", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1964e549-ae20-4c96-adc7-c114de358a27", "eventTime": "2017-02-19T23:28:06Z", "eventName": "GetClientCertificates", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eca8eab9-4fc4-47ae-a4ec-665ff6be0469", "record_id": "flaws_cloudtrail:0000029:eca8eab9-4fc4-47ae-a4ec-665ff6be0469", "row_index": 29, "timestamp": "2017-02-19T23:28:06Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eca8eab9-4fc4-47ae-a4ec-665ff6be0469", "eventTime": "2017-02-19T23:28:06Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d49cd1f-c481-48dd-91fb-16d424db4c4a", "record_id": "flaws_cloudtrail:0000030:8d49cd1f-c481-48dd-91fb-16d424db4c4a", "row_index": 30, "timestamp": "2017-02-19T23:28:06Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d49cd1f-c481-48dd-91fb-16d424db4c4a", "eventTime": "2017-02-19T23:28:06Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea48785-b964-450a-ace0-a3346c2b0f23", "record_id": "flaws_cloudtrail:0000031:ea48785-b964-450a-ace0-a3346c2b0f23", "row_index": 31, "timestamp": "2017-02-19T23:28:10Z", "event_type": "GetAccountSettings08306", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 926, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea48785-b964-450a-ace0-a3346c2b0f23", "eventTime": "2017-02-19T23:28:10Z", "eventName": "GetAccountSettings08306", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"includePreviewFeatures": true}, "responseElements": {"previewFeatures": [], "accountUsage": {"totalCodeSize": 304, "functionCount": 1}, "accountLimit": {"concurrentExecutions": 100, "codeSizeZipped": 52428800, "totalCodeSize": 80530636800, "codeSizeUnzipped": 262144000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f94734-a174-47b4-bce4-ee8c534fef97", "record_id": "flaws_cloudtrail:0000032:f94734-a174-47b4-bce4-ee8c534fef97", "row_index": 32, "timestamp": "2017-02-19T23:28:12Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f94734-a174-47b4-bce4-ee8c534fef97", "eventTime": "2017-02-19T23:28:12Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"qualifier": "$LATEST", "functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c782e72-c702-4b01-b6c8-c53a9d546036", "record_id": "flaws_cloudtrail:0000033:8c782e72-c702-4b01-b6c8-c53a9d546036", "row_index": 33, "timestamp": "2017-02-19T23:28:12Z", "event_type": "ListVersionsByFunction202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c782e72-c702-4b01-b6c8-c53a9d546036", "eventTime": "2017-02-19T23:28:12Z", "eventName": "ListVersionsByFunction202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6c9a710-6e7b-4e12-b052-9bf891190", "record_id": "flaws_cloudtrail:0000034:c6c9a710-6e7b-4e12-b052-9bf891190", "row_index": 34, "timestamp": "2017-02-19T23:28:12Z", "event_type": "GetAccountSettings08306", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 924, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6c9a710-6e7b-4e12-b052-9bf891190", "eventTime": "2017-02-19T23:28:12Z", "eventName": "GetAccountSettings08306", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"includePreviewFeatures": true}, "responseElements": {"previewFeatures": [], "accountUsage": {"totalCodeSize": 304, "functionCount": 1}, "accountLimit": {"concurrentExecutions": 100, "codeSizeZipped": 52428800, "totalCodeSize": 80530636800, "codeSizeUnzipped": 262144000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7e18872-1675-4cad-b56e-f2df7d9dfbbe", "record_id": "flaws_cloudtrail:0000035:c7e18872-1675-4cad-b56e-f2df7d9dfbbe", "row_index": 35, "timestamp": "2017-02-19T23:28:12Z", "event_type": "GetAccountSettings08306", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7e18872-1675-4cad-b56e-f2df7d9dfbbe", "eventTime": "2017-02-19T23:28:12Z", "eventName": "GetAccountSettings08306", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"includePreviewFeatures": true}, "responseElements": {"previewFeatures": [], "accountUsage": {"totalCodeSize": 304, "functionCount": 1}, "accountLimit": {"concurrentExecutions": 100, "codeSizeZipped": 52428800, "totalCodeSize": 80530636800, "codeSizeUnzipped": 262144000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2eebcc74-4fbd-4c61-963e-6eed73ea873f", "record_id": "flaws_cloudtrail:0000036:2eebcc74-4fbd-4c61-963e-6eed73ea873f", "row_index": 36, "timestamp": "2017-02-19T23:28:12Z", "event_type": "GetAccountSettings08306", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2eebcc74-4fbd-4c61-963e-6eed73ea873f", "eventTime": "2017-02-19T23:28:12Z", "eventName": "GetAccountSettings08306", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"includePreviewFeatures": true}, "responseElements": {"previewFeatures": [], "accountUsage": {"totalCodeSize": 304, "functionCount": 1}, "accountLimit": {"concurrentExecutions": 100, "codeSizeZipped": 52428800, "totalCodeSize": 80530636800, "codeSizeUnzipped": 262144000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9244ff78-4b01-4805-9f6e-812a6d3fe1d8", "record_id": "flaws_cloudtrail:0000037:9244ff78-4b01-4805-9f6e-812a6d3fe1d8", "row_index": 37, "timestamp": "2017-02-19T23:28:12Z", "event_type": "ListAliases202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9244ff78-4b01-4805-9f6e-812a6d3fe1d8", "eventTime": "2017-02-19T23:28:12Z", "eventName": "ListAliases202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"marker": "$DEFAULT", "functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9cc4575-0668-4091-a7b3-3c8d11dc45f2", "record_id": "flaws_cloudtrail:0000038:c9cc4575-0668-4091-a7b3-3c8d11dc45f2", "row_index": 38, "timestamp": "2017-02-19T23:28:13Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9cc4575-0668-4091-a7b3-3c8d11dc45f2", "eventTime": "2017-02-19T23:28:13Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6dffde89-e2d5-407b-97ca-a696567b1f21", "record_id": "flaws_cloudtrail:0000039:6dffde89-e2d5-407b-97ca-a696567b1f21", "row_index": 39, "timestamp": "2017-02-19T23:28:13Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6dffde89-e2d5-407b-97ca-a696567b1f21", "eventTime": "2017-02-19T23:28:13Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04abb1f4-8df5-4375-b6cf-821a80d0c7db", "record_id": "flaws_cloudtrail:0000040:04abb1f4-8df5-4375-b6cf-821a80d0c7db", "row_index": 40, "timestamp": "2017-02-19T23:28:15Z", "event_type": "GetDeployments", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04abb1f4-8df5-4375-b6cf-821a80d0c7db", "eventTime": "2017-02-19T23:28:15Z", "eventName": "GetDeployments", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b413178-5c71-4e81-bf8d-567b11ab36a3", "record_id": "flaws_cloudtrail:0000041:b413178-5c71-4e81-bf8d-567b11ab36a3", "row_index": 41, "timestamp": "2017-02-19T23:28:15Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b413178-5c71-4e81-bf8d-567b11ab36a3", "eventTime": "2017-02-19T23:28:15Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "864aed42-5729-422c-8825-3a864c07b25c", "record_id": "flaws_cloudtrail:0000042:864aed42-5729-422c-8825-3a864c07b25c", "row_index": 42, "timestamp": "2017-02-19T23:28:29Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "864aed42-5729-422c-8825-3a864c07b25c", "eventTime": "2017-02-19T23:28:29Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6023ecf2-b2f2-448b-9563-20f6c571f1a5", "record_id": "flaws_cloudtrail:0000043:6023ecf2-b2f2-448b-9563-20f6c571f1a5", "row_index": 43, "timestamp": "2017-02-19T23:28:29Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6023ecf2-b2f2-448b-9563-20f6c571f1a5", "eventTime": "2017-02-19T23:28:29Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2952c31-c6a0-4a34-ae9e-b6cd584da1a1", "record_id": "flaws_cloudtrail:0000044:e2952c31-c6a0-4a34-ae9e-b6cd584da1a1", "row_index": 44, "timestamp": "2017-02-19T23:28:30Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2952c31-c6a0-4a34-ae9e-b6cd584da1a1", "eventTime": "2017-02-19T23:28:30Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b28b0b2-5f59-4364-86bd-86f9752be9b9", "record_id": "flaws_cloudtrail:0000045:6b28b0b2-5f59-4364-86bd-86f9752be9b9", "row_index": 45, "timestamp": "2017-02-19T23:28:30Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b28b0b2-5f59-4364-86bd-86f9752be9b9", "eventTime": "2017-02-19T23:28:30Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6cee10c-bfd7-44cf-a90e-875916a0de3e", "record_id": "flaws_cloudtrail:0000046:d6cee10c-bfd7-44cf-a90e-875916a0de3e", "row_index": 46, "timestamp": "2017-02-19T23:28:31Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6cee10c-bfd7-44cf-a90e-875916a0de3e", "eventTime": "2017-02-19T23:28:31Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "embed": ["methods"], "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "131d80e4-9f2a-4f90-bd50-ce3b85e90b89", "record_id": "flaws_cloudtrail:0000047:131d80e4-9f2a-4f90-bd50-ce3b85e90b89", "row_index": 47, "timestamp": "2017-02-19T23:28:32Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "131d80e4-9f2a-4f90-bd50-ce3b85e90b89", "eventTime": "2017-02-19T23:28:32Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16186a-01a6-40ff-9eee-1f0de8e2f141", "record_id": "flaws_cloudtrail:0000048:16186a-01a6-40ff-9eee-1f0de8e2f141", "row_index": 48, "timestamp": "2017-02-19T23:28:32Z", "event_type": "GetUsagePlans", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16186a-01a6-40ff-9eee-1f0de8e2f141", "eventTime": "2017-02-19T23:28:32Z", "eventName": "GetUsagePlans", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b452032-c8a9-4640-b47e-0851badfee40", "record_id": "flaws_cloudtrail:0000049:3b452032-c8a9-4640-b47e-0851badfee40", "row_index": 49, "timestamp": "2017-02-19T23:28:32Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b452032-c8a9-4640-b47e-0851badfee40", "eventTime": "2017-02-19T23:28:32Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19cb50c0-fcdb-4b5d-a1ff-b7a28ecf4fe6", "record_id": "flaws_cloudtrail:0000050:19cb50c0-fcdb-4b5d-a1ff-b7a28ecf4fe6", "row_index": 50, "timestamp": "2017-02-19T23:28:33Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19cb50c0-fcdb-4b5d-a1ff-b7a28ecf4fe6", "eventTime": "2017-02-19T23:28:33Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "059f01b1-4149-438a-93b2-dae4bec008620", "record_id": "flaws_cloudtrail:0000051:059f01b1-4149-438a-93b2-dae4bec008620", "row_index": 51, "timestamp": "2017-02-19T23:28:33Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "059f01b1-4149-438a-93b2-dae4bec008620", "eventTime": "2017-02-19T23:28:33Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a5a24aa-0c46-4fab-8aa4-a952291b53f", "record_id": "flaws_cloudtrail:0000052:7a5a24aa-0c46-4fab-8aa4-a952291b53f", "row_index": 52, "timestamp": "2017-02-19T23:28:34Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a5a24aa-0c46-4fab-8aa4-a952291b53f", "eventTime": "2017-02-19T23:28:34Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "720f3ba0-77fd-4d44-9f74-61664ebe25d", "record_id": "flaws_cloudtrail:0000053:720f3ba0-77fd-4d44-9f74-61664ebe25d", "row_index": 53, "timestamp": "2017-02-19T23:28:34Z", "event_type": "GetClientCertificates", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "720f3ba0-77fd-4d44-9f74-61664ebe25d", "eventTime": "2017-02-19T23:28:34Z", "eventName": "GetClientCertificates", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af8ae1d2-2e94-4ef2-b648-61be9e7e9f41", "record_id": "flaws_cloudtrail:0000054:af8ae1d2-2e94-4ef2-b648-61be9e7e9f41", "row_index": 54, "timestamp": "2017-02-19T23:28:34Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af8ae1d2-2e94-4ef2-b648-61be9e7e9f41", "eventTime": "2017-02-19T23:28:34Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81bac11b-2bb9-4955-ae68-201b73678a65", "record_id": "flaws_cloudtrail:0000055:81bac11b-2bb9-4955-ae68-201b73678a65", "row_index": 55, "timestamp": "2017-02-19T23:28:39Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81bac11b-2bb9-4955-ae68-201b73678a65", "eventTime": "2017-02-19T23:28:39Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b460ffd-533c-483d-bfb6-64d4e2ad56de", "record_id": "flaws_cloudtrail:0000056:3b460ffd-533c-483d-bfb6-64d4e2ad56de", "row_index": 56, "timestamp": "2017-02-19T23:28:48Z", "event_type": "GetClientCertificates", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b460ffd-533c-483d-bfb6-64d4e2ad56de", "eventTime": "2017-02-19T23:28:48Z", "eventName": "GetClientCertificates", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89c74af5-d22d-4899-b029-b1552c793b54", "record_id": "flaws_cloudtrail:0000057:89c74af5-d22d-4899-b029-b1552c793b54", "row_index": 57, "timestamp": "2017-02-19T23:28:48Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89c74af5-d22d-4899-b029-b1552c793b54", "eventTime": "2017-02-19T23:28:48Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7155dd33-f14c-484c-bfc8-73e8f651191c8", "record_id": "flaws_cloudtrail:0000058:7155dd33-f14c-484c-bfc8-73e8f651191c8", "row_index": 58, "timestamp": "2017-02-19T23:28:48Z", "event_type": "GetDocumentationVersions", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7155dd33-f14c-484c-bfc8-73e8f651191c8", "eventTime": "2017-02-19T23:28:48Z", "eventName": "GetDocumentationVersions", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 100, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ce29425-edba-4d98-9f47-fffe91d2e150", "record_id": "flaws_cloudtrail:0000059:4ce29425-edba-4d98-9f47-fffe91d2e150", "row_index": 59, "timestamp": "2017-02-19T23:28:48Z", "event_type": "GetDeployments", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ce29425-edba-4d98-9f47-fffe91d2e150", "eventTime": "2017-02-19T23:28:48Z", "eventName": "GetDeployments", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56ee0a7f-2186-4e44-a35a-7bfd021c2fe3", "record_id": "flaws_cloudtrail:0000060:56ee0a7f-2186-4e44-a35a-7bfd021c2fe3", "row_index": 60, "timestamp": "2017-02-19T23:28:48Z", "event_type": "CreateDeployment", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1237, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56ee0a7f-2186-4e44-a35a-7bfd021c2fe3", "eventTime": "2017-02-19T23:28:48Z", "eventName": "CreateDeployment", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "createDeploymentInput": {"stageName": "Prod"}, "template": false}, "responseElements": {"id": "qcqf98", "createdDate": "Feb 19, 2017 11:28:48 PM", "deploymentUpdate": {"restApiId": "puspzvwgb6", "deploymentId": "qcqf98", "template": false}, "deploymentStages": {"deploymentId": "qcqf98", "restApiId": "puspzvwgb6", "template": false, "templateSkipList": ["position"]}, "deploymentDelete": {"deploymentId": "qcqf98", "restApiId": "puspzvwgb6", "template": false}, "self": {"deploymentId": "qcqf98", "restApiId": "puspzvwgb6", "template": false}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c958a3b-e16b-454c-bbe0-4c8eef4eb169", "record_id": "flaws_cloudtrail:0000061:3c958a3b-e16b-454c-bbe0-4c8eef4eb169", "row_index": 61, "timestamp": "2017-02-19T23:28:48Z", "event_type": "GetSdkTypes", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c958a3b-e16b-454c-bbe0-4c8eef4eb169", "eventTime": "2017-02-19T23:28:48Z", "eventName": "GetSdkTypes", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9e9295b-63e0-41e5-b194-dfdb727fb693", "record_id": "flaws_cloudtrail:0000062:d9e9295b-63e0-41e5-b194-dfdb727fb693", "row_index": 62, "timestamp": "2017-02-19T23:28:48Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9e9295b-63e0-41e5-b194-dfdb727fb693", "eventTime": "2017-02-19T23:28:48Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7f1139f-7799-465b-9be7-c6fd215a3848", "record_id": "flaws_cloudtrail:0000063:a7f1139f-7799-465b-9be7-c6fd215a3848", "row_index": 63, "timestamp": "2017-02-19T23:28:52Z", "event_type": "GetDeployment", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7f1139f-7799-465b-9be7-c6fd215a3848", "eventTime": "2017-02-19T23:28:52Z", "eventName": "GetDeployment", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"deploymentId": "qcqf98", "restApiId": "puspzvwgb6", "embed": ["apisummary"], "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "906dda4d-c483-4fe3-945a-454e5426c849", "record_id": "flaws_cloudtrail:0000064:906dda4d-c483-4fe3-945a-454e5426c849", "row_index": 64, "timestamp": "2017-02-19T23:28:53Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "906dda4d-c483-4fe3-945a-454e5426c849", "eventTime": "2017-02-19T23:28:53Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f2b87e7-7f08-4cb0-8244-ee861094f42b", "record_id": "flaws_cloudtrail:0000065:1f2b87e7-7f08-4cb0-8244-ee861094f42b", "row_index": 65, "timestamp": "2017-02-19T23:29:04Z", "event_type": "GetClientCertificates", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f2b87e7-7f08-4cb0-8244-ee861094f42b", "eventTime": "2017-02-19T23:29:04Z", "eventName": "GetClientCertificates", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2189f616-b927-46ab-9dc3-ed25622f239", "record_id": "flaws_cloudtrail:0000066:2189f616-b927-46ab-9dc3-ed25622f239", "row_index": 66, "timestamp": "2017-02-19T23:29:04Z", "event_type": "GetDocumentationParts", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2189f616-b927-46ab-9dc3-ed25622f239", "eventTime": "2017-02-19T23:29:04Z", "eventName": "GetDocumentationParts", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e2e1c1c-c36d-4f70-93de-2a8c51d8288d", "record_id": "flaws_cloudtrail:0000067:0e2e1c1c-c36d-4f70-93de-2a8c51d8288d", "row_index": 67, "timestamp": "2017-02-19T23:29:04Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e2e1c1c-c36d-4f70-93de-2a8c51d8288d", "eventTime": "2017-02-19T23:29:04Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "326e9ed2-8c98-4ebc-a377-db0aa40d0def", "record_id": "flaws_cloudtrail:0000068:326e9ed2-8c98-4ebc-a377-db0aa40d0def", "row_index": 68, "timestamp": "2017-02-19T23:29:04Z", "event_type": "GetDeployments", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "326e9ed2-8c98-4ebc-a377-db0aa40d0def", "eventTime": "2017-02-19T23:29:04Z", "eventName": "GetDeployments", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d11c1344-8d15-4968-862b-c033b675fd8b", "record_id": "flaws_cloudtrail:0000069:d11c1344-8d15-4968-862b-c033b675fd8b", "row_index": 69, "timestamp": "2017-02-19T23:29:04Z", "event_type": "GetDocumentationVersions", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d11c1344-8d15-4968-862b-c033b675fd8b", "eventTime": "2017-02-19T23:29:04Z", "eventName": "GetDocumentationVersions", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 100, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "500e9179-3e5c-4e11-9e9f-ae58a9cdb547", "record_id": "flaws_cloudtrail:0000070:500e9179-3e5c-4e11-9e9f-ae58a9cdb547", "row_index": 70, "timestamp": "2017-02-19T23:29:04Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "500e9179-3e5c-4e11-9e9f-ae58a9cdb547", "eventTime": "2017-02-19T23:29:04Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2a9263a-0647-46c4-95bb-1ae9ab607e29", "record_id": "flaws_cloudtrail:0000071:b2a9263a-0647-46c4-95bb-1ae9ab607e29", "row_index": 71, "timestamp": "2017-02-19T23:29:04Z", "event_type": "GetSdkTypes", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2a9263a-0647-46c4-95bb-1ae9ab607e29", "eventTime": "2017-02-19T23:29:04Z", "eventName": "GetSdkTypes", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f5dbda9-ddb5-45a0-93a6-f61d0c37a949", "record_id": "flaws_cloudtrail:0000072:7f5dbda9-ddb5-45a0-93a6-f61d0c37a949", "row_index": 72, "timestamp": "2017-02-19T23:29:07Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f5dbda9-ddb5-45a0-93a6-f61d0c37a949", "eventTime": "2017-02-19T23:29:07Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "embed": ["methods"], "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a89ce2c9-48ed-4507-a345-1e797387b94b", "record_id": "flaws_cloudtrail:0000073:a89ce2c9-48ed-4507-a345-1e797387b94b", "row_index": 73, "timestamp": "2017-02-19T23:29:07Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a89ce2c9-48ed-4507-a345-1e797387b94b", "eventTime": "2017-02-19T23:29:07Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbb9b377-8ddf-4da8-8983-9fefa361ffb3", "record_id": "flaws_cloudtrail:0000074:dbb9b377-8ddf-4da8-8983-9fefa361ffb3", "row_index": 74, "timestamp": "2017-02-19T23:29:07Z", "event_type": "GetUsagePlans", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbb9b377-8ddf-4da8-8983-9fefa361ffb3", "eventTime": "2017-02-19T23:29:07Z", "eventName": "GetUsagePlans", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26892c4-8681-44cc-92b6-de578362c7ea", "record_id": "flaws_cloudtrail:0000075:26892c4-8681-44cc-92b6-de578362c7ea", "row_index": 75, "timestamp": "2017-02-19T23:29:08Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26892c4-8681-44cc-92b6-de578362c7ea", "eventTime": "2017-02-19T23:29:08Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5807cdf1-f41d-4845-81ce-7b9670e9af6a", "record_id": "flaws_cloudtrail:0000076:5807cdf1-f41d-4845-81ce-7b9670e9af6a", "row_index": 76, "timestamp": "2017-02-19T23:29:09Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5807cdf1-f41d-4845-81ce-7b9670e9af6a", "eventTime": "2017-02-19T23:29:09Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bebef512-bc75-4da4-be2b-90d000838bce", "record_id": "flaws_cloudtrail:0000077:bebef512-bc75-4da4-be2b-90d000838bce", "row_index": 77, "timestamp": "2017-02-19T23:29:09Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bebef512-bc75-4da4-be2b-90d000838bce", "eventTime": "2017-02-19T23:29:09Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "135615a-c531-4dfc-8ae8-a523fc6effb3", "record_id": "flaws_cloudtrail:0000078:135615a-c531-4dfc-8ae8-a523fc6effb3", "row_index": 78, "timestamp": "2017-02-19T23:29:11Z", "event_type": "GetDeployment", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "135615a-c531-4dfc-8ae8-a523fc6effb3", "eventTime": "2017-02-19T23:29:11Z", "eventName": "GetDeployment", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"deploymentId": "qcqf98", "restApiId": "puspzvwgb6", "embed": ["apisummary"], "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b4a4376-47ca-4e6e-b49b-c3393d5b4f6d", "record_id": "flaws_cloudtrail:0000079:8b4a4376-47ca-4e6e-b49b-c3393d5b4f6d", "row_index": 79, "timestamp": "2017-02-19T23:29:12Z", "event_type": "GetSdkTypes", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b4a4376-47ca-4e6e-b49b-c3393d5b4f6d", "eventTime": "2017-02-19T23:29:12Z", "eventName": "GetSdkTypes", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a35faf7c-a067-49e4-a4d3-3e1bdbd35fc1", "record_id": "flaws_cloudtrail:0000080:a35faf7c-a067-49e4-a4d3-3e1bdbd35fc1", "row_index": 80, "timestamp": "2017-02-19T23:29:12Z", "event_type": "GetDeployments", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a35faf7c-a067-49e4-a4d3-3e1bdbd35fc1", "eventTime": "2017-02-19T23:29:12Z", "eventName": "GetDeployments", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f572cad-e286-430f-9892-5eb27579f5db", "record_id": "flaws_cloudtrail:0000081:9f572cad-e286-430f-9892-5eb27579f5db", "row_index": 81, "timestamp": "2017-02-19T23:29:12Z", "event_type": "GetDocumentationVersions", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f572cad-e286-430f-9892-5eb27579f5db", "eventTime": "2017-02-19T23:29:12Z", "eventName": "GetDocumentationVersions", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 100, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cc9ea1c-2f9b-4b2a-aa67-6da08d960f29", "record_id": "flaws_cloudtrail:0000082:2cc9ea1c-2f9b-4b2a-aa67-6da08d960f29", "row_index": 82, "timestamp": "2017-02-19T23:29:12Z", "event_type": "GetClientCertificates", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cc9ea1c-2f9b-4b2a-aa67-6da08d960f29", "eventTime": "2017-02-19T23:29:12Z", "eventName": "GetClientCertificates", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b14587-cfd8-45bb-af57-168604be19e", "record_id": "flaws_cloudtrail:0000083:9b14587-cfd8-45bb-af57-168604be19e", "row_index": 83, "timestamp": "2017-02-19T23:29:12Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b14587-cfd8-45bb-af57-168604be19e", "eventTime": "2017-02-19T23:29:12Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75dfa243-8d12-4246-941b-b1af27ff41d3", "record_id": "flaws_cloudtrail:0000084:75dfa243-8d12-4246-941b-b1af27ff41d3", "row_index": 84, "timestamp": "2017-02-19T23:29:24Z", "event_type": "DeleteStage", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75dfa243-8d12-4246-941b-b1af27ff41d3", "eventTime": "2017-02-19T23:29:24Z", "eventName": "DeleteStage", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "stageName": "Prod", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8366d220-0f6f-48e4-b879-012121b752cd", "record_id": "flaws_cloudtrail:0000085:8366d220-0f6f-48e4-b879-012121b752cd", "row_index": 85, "timestamp": "2017-02-19T23:29:24Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8366d220-0f6f-48e4-b879-012121b752cd", "eventTime": "2017-02-19T23:29:24Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ff4a2ba-d126-4aad-a2be-44206b34c1dd", "record_id": "flaws_cloudtrail:0000086:4ff4a2ba-d126-4aad-a2be-44206b34c1dd", "row_index": 86, "timestamp": "2017-02-19T23:29:24Z", "event_type": "GetAuthorizers", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ff4a2ba-d126-4aad-a2be-44206b34c1dd", "eventTime": "2017-02-19T23:29:24Z", "eventName": "GetAuthorizers", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "651d3b17-d768-4945-bbde-73573adae879", "record_id": "flaws_cloudtrail:0000087:651d3b17-d768-4945-bbde-73573adae879", "row_index": 87, "timestamp": "2017-02-19T23:29:24Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "651d3b17-d768-4945-bbde-73573adae879", "eventTime": "2017-02-19T23:29:24Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03b76edc-9ce2-4993-93df-d921ea972344", "record_id": "flaws_cloudtrail:0000088:03b76edc-9ce2-4993-93df-d921ea972344", "row_index": 88, "timestamp": "2017-02-19T23:29:25Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03b76edc-9ce2-4993-93df-d921ea972344", "eventTime": "2017-02-19T23:29:25Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "538cb8d0-9db9-4f16-b5b5-f90efbd408314", "record_id": "flaws_cloudtrail:0000089:538cb8d0-9db9-4f16-b5b5-f90efbd408314", "row_index": 89, "timestamp": "2017-02-19T23:29:25Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "538cb8d0-9db9-4f16-b5b5-f90efbd408314", "eventTime": "2017-02-19T23:29:25Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "226b2221-9ec5-43be-98b5-a54ec9be28d5", "record_id": "flaws_cloudtrail:0000090:226b2221-9ec5-43be-98b5-a54ec9be28d5", "row_index": 90, "timestamp": "2017-02-19T23:29:25Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "226b2221-9ec5-43be-98b5-a54ec9be28d5", "eventTime": "2017-02-19T23:29:25Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7596d385-b052-45c3-9a7a-4b4f4307c477", "record_id": "flaws_cloudtrail:0000091:7596d385-b052-45c3-9a7a-4b4f4307c477", "row_index": 91, "timestamp": "2017-02-19T23:29:25Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7596d385-b052-45c3-9a7a-4b4f4307c477", "eventTime": "2017-02-19T23:29:25Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a672059-cccd-42ab-a8a7-af928f077493", "record_id": "flaws_cloudtrail:0000092:5a672059-cccd-42ab-a8a7-af928f077493", "row_index": 92, "timestamp": "2017-02-19T23:29:25Z", "event_type": "GetUsagePlans", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a672059-cccd-42ab-a8a7-af928f077493", "eventTime": "2017-02-19T23:29:25Z", "eventName": "GetUsagePlans", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d307520a2-1fc7-493a-9060-0ea21e19900", "record_id": "flaws_cloudtrail:0000093:d307520a2-1fc7-493a-9060-0ea21e19900", "row_index": 93, "timestamp": "2017-02-19T23:29:25Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d307520a2-1fc7-493a-9060-0ea21e19900", "eventTime": "2017-02-19T23:29:25Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "embed": ["methods"], "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f7cbc6e-0f58-4fce-927d-728573c73efa", "record_id": "flaws_cloudtrail:0000094:5f7cbc6e-0f58-4fce-927d-728573c73efa", "row_index": 94, "timestamp": "2017-02-19T23:29:25Z", "event_type": "GetDocumentationParts", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f7cbc6e-0f58-4fce-927d-728573c73efa", "eventTime": "2017-02-19T23:29:25Z", "eventName": "GetDocumentationParts", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e4a6a1b-a5d2-428e-a4a7-759954fbd594c", "record_id": "flaws_cloudtrail:0000095:4e4a6a1b-a5d2-428e-a4a7-759954fbd594c", "row_index": 95, "timestamp": "2017-02-19T23:29:26Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e4a6a1b-a5d2-428e-a4a7-759954fbd594c", "eventTime": "2017-02-19T23:29:26Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8026f6c-efdc-4ccc-93bc-c5eaab4bda57", "record_id": "flaws_cloudtrail:0000096:f8026f6c-efdc-4ccc-93bc-c5eaab4bda57", "row_index": 96, "timestamp": "2017-02-19T23:29:28Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8026f6c-efdc-4ccc-93bc-c5eaab4bda57", "eventTime": "2017-02-19T23:29:28Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50e6b567-58b6-4baa-88a6-3f0b198d7ffc", "record_id": "flaws_cloudtrail:0000097:50e6b567-58b6-4baa-88a6-3f0b198d7ffc", "row_index": 97, "timestamp": "2017-02-19T23:29:35Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50e6b567-58b6-4baa-88a6-3f0b198d7ffc", "eventTime": "2017-02-19T23:29:35Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "900f9186-b418-4306-907b-e12ac15d351e", "record_id": "flaws_cloudtrail:0000098:900f9186-b418-4306-907b-e12ac15d351e", "row_index": 98, "timestamp": "2017-02-19T23:29:35Z", "event_type": "CreateDeployment", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1240, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "900f9186-b418-4306-907b-e12ac15d351e", "eventTime": "2017-02-19T23:29:35Z", "eventName": "CreateDeployment", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "createDeploymentInput": {"stageName": "Level5"}, "template": false}, "responseElements": {"id": "f1ibpo", "createdDate": "Feb 19, 2017 11:29:34 PM", "deploymentUpdate": {"restApiId": "puspzvwgb6", "deploymentId": "f1ibpo", "template": false}, "deploymentStages": {"deploymentId": "f1ibpo", "restApiId": "puspzvwgb6", "template": false, "templateSkipList": ["position"]}, "deploymentDelete": {"deploymentId": "f1ibpo", "restApiId": "puspzvwgb6", "template": false}, "self": {"deploymentId": "f1ibpo", "restApiId": "puspzvwgb6", "template": false}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "595ee153-fa6e-44e8-9cb3-47fd220a184f", "record_id": "flaws_cloudtrail:0000099:595ee153-fa6e-44e8-9cb3-47fd220a184f", "row_index": 99, "timestamp": "2017-02-19T23:29:35Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "595ee153-fa6e-44e8-9cb3-47fd220a184f", "eventTime": "2017-02-19T23:29:35Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c06a41e1-f034-4b2f-aaab-99c7a22a56a8", "record_id": "flaws_cloudtrail:0000100:c06a41e1-f034-4b2f-aaab-99c7a22a56a8", "row_index": 100, "timestamp": "2017-02-19T23:29:36Z", "event_type": "GetClientCertificates", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c06a41e1-f034-4b2f-aaab-99c7a22a56a8", "eventTime": "2017-02-19T23:29:36Z", "eventName": "GetClientCertificates", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18ca5c13-1e92-490e-ae29-991f35d35db0", "record_id": "flaws_cloudtrail:0000101:18ca5c13-1e92-490e-ae29-991f35d35db0", "row_index": 101, "timestamp": "2017-02-19T23:29:36Z", "event_type": "GetSdkTypes", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18ca5c13-1e92-490e-ae29-991f35d35db0", "eventTime": "2017-02-19T23:29:36Z", "eventName": "GetSdkTypes", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e165e6e4-df08-42b5-9635-2dd60fa3392f", "record_id": "flaws_cloudtrail:0000102:e165e6e4-df08-42b5-9635-2dd60fa3392f", "row_index": 102, "timestamp": "2017-02-19T23:29:36Z", "event_type": "GetDocumentationVersions", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e165e6e4-df08-42b5-9635-2dd60fa3392f", "eventTime": "2017-02-19T23:29:36Z", "eventName": "GetDocumentationVersions", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 100, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "688b88f8-9a98-4636-a0d8-44260ad38", "record_id": "flaws_cloudtrail:0000103:688b88f8-9a98-4636-a0d8-44260ad38", "row_index": 103, "timestamp": "2017-02-19T23:29:36Z", "event_type": "GetDeployments", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "688b88f8-9a98-4636-a0d8-44260ad38", "eventTime": "2017-02-19T23:29:36Z", "eventName": "GetDeployments", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "428d0c33-ee32-4b38-be16-1b357f9f6bc4", "record_id": "flaws_cloudtrail:0000104:428d0c33-ee32-4b38-be16-1b357f9f6bc4", "row_index": 104, "timestamp": "2017-02-19T23:29:38Z", "event_type": "GetDeployment", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "428d0c33-ee32-4b38-be16-1b357f9f6bc4", "eventTime": "2017-02-19T23:29:38Z", "eventName": "GetDeployment", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"deploymentId": "f1ibpo", "restApiId": "puspzvwgb6", "embed": ["apisummary"], "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d21e2d12-485e-4b5c-9893-57d621fc67e7", "record_id": "flaws_cloudtrail:0000105:d21e2d12-485e-4b5c-9893-57d621fc67e7", "row_index": 105, "timestamp": "2017-02-19T23:29:39Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d21e2d12-485e-4b5c-9893-57d621fc67e7", "eventTime": "2017-02-19T23:29:39Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ec3295a-306f-4422-8ec7-6a74eda7e965", "record_id": "flaws_cloudtrail:0000106:8ec3295a-306f-4422-8ec7-6a74eda7e965", "row_index": 106, "timestamp": "2017-02-19T23:36:15Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ec3295a-306f-4422-8ec7-6a74eda7e965", "eventTime": "2017-02-19T23:36:15Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "565ecfa9-0cc3-4105-aa71-ebd707586", "record_id": "flaws_cloudtrail:0000107:565ecfa9-0cc3-4105-aa71-ebd707586", "row_index": 107, "timestamp": "2017-02-19T23:36:15Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "565ecfa9-0cc3-4105-aa71-ebd707586", "eventTime": "2017-02-19T23:36:15Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"roleName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de508464d-25a3-4f05-bb35-1bcfb75d55ab", "record_id": "flaws_cloudtrail:0000108:de508464d-25a3-4f05-bb35-1bcfb75d55ab", "row_index": 108, "timestamp": "2017-02-19T23:36:18Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de508464d-25a3-4f05-bb35-1bcfb75d55ab", "eventTime": "2017-02-19T23:36:18Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6ce3061-b2ce-485d-898f-2ceaee62f1b4", "record_id": "flaws_cloudtrail:0000109:c6ce3061-b2ce-485d-898f-2ceaee62f1b4", "row_index": 109, "timestamp": "2017-02-19T23:36:19Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6ce3061-b2ce-485d-898f-2ceaee62f1b4", "eventTime": "2017-02-19T23:36:19Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f45b304-6182-4eb8-8bf3-b701bbc08664", "record_id": "flaws_cloudtrail:0000110:9f45b304-6182-4eb8-8bf3-b701bbc08664", "row_index": 110, "timestamp": "2017-02-19T23:36:19Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f45b304-6182-4eb8-8bf3-b701bbc08664", "eventTime": "2017-02-19T23:36:19Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92e58e4c-aedb-4d58-9cf6-3952e649e03a", "record_id": "flaws_cloudtrail:0000111:92e58e4c-aedb-4d58-9cf6-3952e649e03a", "row_index": 111, "timestamp": "2017-02-19T23:36:23Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92e58e4c-aedb-4d58-9cf6-3952e649e03a", "eventTime": "2017-02-19T23:36:23Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad109a84-8473-4f31-9ed6-8a2a3f5eb5ec", "record_id": "flaws_cloudtrail:0000112:ad109a84-8473-4f31-9ed6-8a2a3f5eb5ec", "row_index": 112, "timestamp": "2017-02-19T23:36:23Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad109a84-8473-4f31-9ed6-8a2a3f5eb5ec", "eventTime": "2017-02-19T23:36:23Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f3a429d-bc26-4ac6-8dfe-9b41c6e63c7c", "record_id": "flaws_cloudtrail:0000113:8f3a429d-bc26-4ac6-8dfe-9b41c6e63c7c", "row_index": 113, "timestamp": "2017-02-19T23:36:23Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f3a429d-bc26-4ac6-8dfe-9b41c6e63c7c", "eventTime": "2017-02-19T23:36:23Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c06bab84-63e4-4d8f-afa7-b97c64d42d3b", "record_id": "flaws_cloudtrail:0000114:c06bab84-63e4-4d8f-afa7-b97c64d42d3b", "row_index": 114, "timestamp": "2017-02-19T23:36:23Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c06bab84-63e4-4d8f-afa7-b97c64d42d3b", "eventTime": "2017-02-19T23:36:23Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdb196b0-cf03-4570-b9da-636dc4df4a6e", "record_id": "flaws_cloudtrail:0000115:fdb196b0-cf03-4570-b9da-636dc4df4a6e", "row_index": 115, "timestamp": "2017-02-19T23:36:23Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdb196b0-cf03-4570-b9da-636dc4df4a6e", "eventTime": "2017-02-19T23:36:23Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44447-510a-4d50-8bb8-cf7fe53d52e9", "record_id": "flaws_cloudtrail:0000116:44447-510a-4d50-8bb8-cf7fe53d52e9", "row_index": 116, "timestamp": "2017-02-19T23:36:23Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44447-510a-4d50-8bb8-cf7fe53d52e9", "eventTime": "2017-02-19T23:36:23Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca02aa72-f132-4add-9c60-dabd098983b", "record_id": "flaws_cloudtrail:0000117:ca02aa72-f132-4add-9c60-dabd098983b", "row_index": 117, "timestamp": "2017-02-19T23:36:23Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca02aa72-f132-4add-9c60-dabd098983b", "eventTime": "2017-02-19T23:36:23Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b129030d-4998-4421-b957-04190df9ef", "record_id": "flaws_cloudtrail:0000118:b129030d-4998-4421-b957-04190df9ef", "row_index": 118, "timestamp": "2017-02-19T23:36:25Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b129030d-4998-4421-b957-04190df9ef", "eventTime": "2017-02-19T23:36:25Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa05ab73-5475-4bae-b7f4-a344c7cf1d1a", "record_id": "flaws_cloudtrail:0000119:aa05ab73-5475-4bae-b7f4-a344c7cf1d1a", "row_index": 119, "timestamp": "2017-02-19T23:36:27Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa05ab73-5475-4bae-b7f4-a344c7cf1d1a", "eventTime": "2017-02-19T23:36:27Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc8bef97-4a4b-4a75-b8c6-26c0d71de5e1", "record_id": "flaws_cloudtrail:0000120:dc8bef97-4a4b-4a75-b8c6-26c0d71de5e1", "row_index": 120, "timestamp": "2017-02-19T23:36:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc8bef97-4a4b-4a75-b8c6-26c0d71de5e1", "eventTime": "2017-02-19T23:36:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d830f1c5-a62c-4f48-9668-5f720a5d8f67", "record_id": "flaws_cloudtrail:0000121:d830f1c5-a62c-4f48-9668-5f720a5d8f67", "row_index": 121, "timestamp": "2017-02-19T23:36:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d830f1c5-a62c-4f48-9668-5f720a5d8f67", "eventTime": "2017-02-19T23:36:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fa470a6-f05b-4117-b61d-6d6c90d95b88", "record_id": "flaws_cloudtrail:0000122:3fa470a6-f05b-4117-b61d-6d6c90d95b88", "row_index": 122, "timestamp": "2017-02-19T23:36:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fa470a6-f05b-4117-b61d-6d6c90d95b88", "eventTime": "2017-02-19T23:36:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f9f18d2-988b-4184-90b0-e0f92fbadaba", "record_id": "flaws_cloudtrail:0000123:0f9f18d2-988b-4184-90b0-e0f92fbadaba", "row_index": 123, "timestamp": "2017-02-19T23:36:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f9f18d2-988b-4184-90b0-e0f92fbadaba", "eventTime": "2017-02-19T23:36:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v8"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "986fbcc0-f2b9-485c-befc-609153550987", "record_id": "flaws_cloudtrail:0000124:986fbcc0-f2b9-485c-befc-609153550987", "row_index": 124, "timestamp": "2017-02-19T23:36:27Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "986fbcc0-f2b9-485c-befc-609153550987", "eventTime": "2017-02-19T23:36:27Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34e9b1d2-10a4-4edd-9979-57c60e8e643c", "record_id": "flaws_cloudtrail:0000125:34e9b1d2-10a4-4edd-9979-57c60e8e643c", "row_index": 125, "timestamp": "2017-02-19T23:36:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34e9b1d2-10a4-4edd-9979-57c60e8e643c", "eventTime": "2017-02-19T23:36:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d98f5d8-8a7b-4f25-9966-2d3539cfb88e", "record_id": "flaws_cloudtrail:0000126:5d98f5d8-8a7b-4f25-9966-2d3539cfb88e", "row_index": 126, "timestamp": "2017-02-19T23:36:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d98f5d8-8a7b-4f25-9966-2d3539cfb88e", "eventTime": "2017-02-19T23:36:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acc5c2a3-62b5-4ab6-bee3-35c209d64ef5", "record_id": "flaws_cloudtrail:0000127:acc5c2a3-62b5-4ab6-bee3-35c209d64ef5", "row_index": 127, "timestamp": "2017-02-19T23:36:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acc5c2a3-62b5-4ab6-bee3-35c209d64ef5", "eventTime": "2017-02-19T23:36:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "121fd228-67c9-40c9-b592-c1a6555e2ec1", "record_id": "flaws_cloudtrail:0000128:121fd228-67c9-40c9-b592-c1a6555e2ec1", "row_index": 128, "timestamp": "2017-02-19T23:36:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "121fd228-67c9-40c9-b592-c1a6555e2ec1", "eventTime": "2017-02-19T23:36:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v9"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02e4dded-e374-4e60-a331-19df3af1c76a", "record_id": "flaws_cloudtrail:0000129:02e4dded-e374-4e60-a331-19df3af1c76a", "row_index": 129, "timestamp": "2017-02-19T23:36:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02e4dded-e374-4e60-a331-19df3af1c76a", "eventTime": "2017-02-19T23:36:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v7"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2598c57b-1377-4fab-a5b1-8d64ea0f56d2", "record_id": "flaws_cloudtrail:0000130:2598c57b-1377-4fab-a5b1-8d64ea0f56d2", "row_index": 130, "timestamp": "2017-02-19T23:38:17Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIA3JSUOQCUGDDKXCAI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2598c57b-1377-4fab-a5b1-8d64ea0f56d2", "eventTime": "2017-02-19T23:38:17Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIA3JSUOQCUGDDKXCAI", "userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bea07b8f-4002-4367-9e35-162554f607", "record_id": "flaws_cloudtrail:0000131:bea07b8f-4002-4367-9e35-162554f607", "row_index": 131, "timestamp": "2017-02-19T23:38:36Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAALWBOUOQ3FECEV1C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.143.251.253", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bea07b8f-4002-4367-9e35-162554f607", "eventTime": "2017-02-19T23:38:36Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.143.251.253", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAALWBOUOQ3FECEV1C", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9974e790-a93f-4c82-b167-07ecdea27a31", "record_id": "flaws_cloudtrail:0000132:9974e790-a93f-4c82-b167-07ecdea27a31", "row_index": 132, "timestamp": "2017-02-19T23:38:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAALWBOUOQ3FECEV1C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.143.251.253", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9974e790-a93f-4c82-b167-07ecdea27a31", "eventTime": "2017-02-19T23:38:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.143.251.253", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAALWBOUOQ3FECEV1C", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "182688eaf-5708-4356-b34d-2539a93ecd04", "record_id": "flaws_cloudtrail:0000133:182688eaf-5708-4356-b34d-2539a93ecd04", "row_index": 133, "timestamp": "2017-02-19T23:38:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAALWBOUOQ3FECEV1C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.143.251.253", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "182688eaf-5708-4356-b34d-2539a93ecd04", "eventTime": "2017-02-19T23:38:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.143.251.253", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAALWBOUOQ3FECEV1C", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc4cae48-6f64-47c2-bc65-8c5fe1d44bff", "record_id": "flaws_cloudtrail:0000134:bc4cae48-6f64-47c2-bc65-8c5fe1d44bff", "row_index": 134, "timestamp": "2017-02-19T23:38:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAALWBOUOQ3FECEV1C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.143.251.253", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc4cae48-6f64-47c2-bc65-8c5fe1d44bff", "eventTime": "2017-02-19T23:38:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.143.251.253", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAALWBOUOQ3FECEV1C", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42b24bff-7d2f-4a7c-92fd-8553008e241c", "record_id": "flaws_cloudtrail:0000135:42b24bff-7d2f-4a7c-92fd-8553008e241c", "row_index": 135, "timestamp": "2017-02-19T23:38:36Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAALWBOUOQ3FECEV1C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.143.251.253", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42b24bff-7d2f-4a7c-92fd-8553008e241c", "eventTime": "2017-02-19T23:38:36Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.143.251.253", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAALWBOUOQ3FECEV1C", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "881a4205-b925-4485-b4f7-8adca230f5af", "record_id": "flaws_cloudtrail:0000136:881a4205-b925-4485-b4f7-8adca230f5af", "row_index": 136, "timestamp": "2017-02-19T23:38:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAALWBOUOQ3FECEV1C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.143.251.253", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "881a4205-b925-4485-b4f7-8adca230f5af", "eventTime": "2017-02-19T23:38:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.143.251.253", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAALWBOUOQ3FECEV1C", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28c646a1-3d77-45fa-8fcd-b47641da18fc", "record_id": "flaws_cloudtrail:0000137:28c646a1-3d77-45fa-8fcd-b47641da18fc", "row_index": 137, "timestamp": "2017-02-19T23:38:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAALWBOUOQ3FECEV1C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.143.251.253", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28c646a1-3d77-45fa-8fcd-b47641da18fc", "eventTime": "2017-02-19T23:38:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.143.251.253", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAALWBOUOQ3FECEV1C", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2abcdcb4-c7b7-4ee4-bf0d-6cd6e9e08394", "record_id": "flaws_cloudtrail:0000138:2abcdcb4-c7b7-4ee4-bf0d-6cd6e9e08394", "row_index": 138, "timestamp": "2017-02-19T23:38:36Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAALWBOUOQ3FECEV1C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.143.251.253", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2abcdcb4-c7b7-4ee4-bf0d-6cd6e9e08394", "eventTime": "2017-02-19T23:38:36Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.143.251.253", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAALWBOUOQ3FECEV1C", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "151b4961-cd49-4581-93d6-5ea226244", "record_id": "flaws_cloudtrail:0000139:151b4961-cd49-4581-93d6-5ea226244", "row_index": 139, "timestamp": "2017-02-19T23:38:36Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAALWBOUOQ3FECEV1C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.143.251.253", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "151b4961-cd49-4581-93d6-5ea226244", "eventTime": "2017-02-19T23:38:36Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.143.251.253", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAALWBOUOQ3FECEV1C", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0c7afbb-5b6b-4071-aa3b-6df1d66f4cba", "record_id": "flaws_cloudtrail:0000140:a0c7afbb-5b6b-4071-aa3b-6df1d66f4cba", "row_index": 140, "timestamp": "2017-02-19T23:38:36Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAALWBOUOQ3FECEV1C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.143.251.253", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0c7afbb-5b6b-4071-aa3b-6df1d66f4cba", "eventTime": "2017-02-19T23:38:36Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.143.251.253", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAALWBOUOQ3FECEV1C", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxResults": 10000, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8249e81-3a01-4d0f-8f95-234e4bf536e6", "record_id": "flaws_cloudtrail:0000141:a8249e81-3a01-4d0f-8f95-234e4bf536e6", "row_index": 141, "timestamp": "2017-02-19T23:38:36Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAALWBOUOQ3FECEV1C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.143.251.253", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8249e81-3a01-4d0f-8f95-234e4bf536e6", "eventTime": "2017-02-19T23:38:36Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.143.251.253", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAALWBOUOQ3FECEV1C", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3ad21ba-1218-47e3-9804-d99935d0dd0d", "record_id": "flaws_cloudtrail:0000142:f3ad21ba-1218-47e3-9804-d99935d0dd0d", "row_index": 142, "timestamp": "2017-02-19T23:38:36Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAALWBOUOQ3FECEV1C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.143.251.253", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3ad21ba-1218-47e3-9804-d99935d0dd0d", "eventTime": "2017-02-19T23:38:36Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.143.251.253", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAALWBOUOQ3FECEV1C", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5ce259b-f50a-423c-b044-2f49499d2", "record_id": "flaws_cloudtrail:0000143:a5ce259b-f50a-423c-b044-2f49499d2", "row_index": 143, "timestamp": "2017-02-19T23:38:36Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAALWBOUOQ3FECEV1C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "227.143.251.253", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5ce259b-f50a-423c-b044-2f49499d2", "eventTime": "2017-02-19T23:38:36Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "227.143.251.253", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAALWBOUOQ3FECEV1C", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3caae15-8f31-4709-a334-94f2ffe093a7", "record_id": "flaws_cloudtrail:0000144:b3caae15-8f31-4709-a334-94f2ffe093a7", "row_index": 144, "timestamp": "2017-02-19T23:38:40Z", "event_type": "DescribePlacementGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3caae15-8f31-4709-a334-94f2ffe093a7", "eventTime": "2017-02-19T23:38:40Z", "eventName": "DescribePlacementGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"placementGroupSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b52c4119-654d-4a9c-9047-c6ea69baad3b", "record_id": "flaws_cloudtrail:0000145:b52c4119-654d-4a9c-9047-c6ea69baad3b", "row_index": 145, "timestamp": "2017-02-19T23:38:40Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b52c4119-654d-4a9c-9047-c6ea69baad3b", "eventTime": "2017-02-19T23:38:40Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2575e67c-17fd-406e-87ee-a710f37fb859", "record_id": "flaws_cloudtrail:0000146:2575e67c-17fd-406e-87ee-a710f37fb859", "row_index": 146, "timestamp": "2017-02-19T23:38:40Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2575e67c-17fd-406e-87ee-a710f37fb859", "eventTime": "2017-02-19T23:38:40Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59f8b6d6-0c14-43ba-84aa-dcf38d673ed1", "record_id": "flaws_cloudtrail:0000147:59f8b6d6-0c14-43ba-84aa-dcf38d673ed1", "row_index": 147, "timestamp": "2017-02-19T23:38:40Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59f8b6d6-0c14-43ba-84aa-dcf38d673ed1", "eventTime": "2017-02-19T23:38:40Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d89f41c-e99a-4c9e-871c-ac5bbcb82647", "record_id": "flaws_cloudtrail:0000148:0d89f41c-e99a-4c9e-871c-ac5bbcb82647", "row_index": 148, "timestamp": "2017-02-19T23:38:40Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d89f41c-e99a-4c9e-871c-ac5bbcb82647", "eventTime": "2017-02-19T23:38:40Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"DescribeHostsRequest": {"Filter": {"Value": {"tag": "1", "content": "available"}, "tag": "1", "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a417d68-bc3b-4342-8911-2d949bd53378", "record_id": "flaws_cloudtrail:0000149:4a417d68-bc3b-4342-8911-2d949bd53378", "row_index": 149, "timestamp": "2017-02-19T23:38:40Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a417d68-bc3b-4342-8911-2d949bd53378", "eventTime": "2017-02-19T23:38:40Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52de7cdf-4204-4d51-b219-964c13ccfbaf", "record_id": "flaws_cloudtrail:0000150:52de7cdf-4204-4d51-b219-964c13ccfbaf", "row_index": 150, "timestamp": "2017-02-19T23:38:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52de7cdf-4204-4d51-b219-964c13ccfbaf", "eventTime": "2017-02-19T23:38:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35581a1-eb1a-43ae-937f-8878c32d3882", "record_id": "flaws_cloudtrail:0000151:35581a1-eb1a-43ae-937f-8878c32d3882", "row_index": 151, "timestamp": "2017-02-19T23:38:40Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35581a1-eb1a-43ae-937f-8878c32d3882", "eventTime": "2017-02-19T23:38:40Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"accountAttributeNameSet": {"items": [{"attributeName": "supported-platforms"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7477dbe-24f3-48b8-9420-6cce745c3634", "record_id": "flaws_cloudtrail:0000152:e7477dbe-24f3-48b8-9420-6cce745c3634", "row_index": 152, "timestamp": "2017-02-19T23:38:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7477dbe-24f3-48b8-9420-6cce745c3634", "eventTime": "2017-02-19T23:38:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27fb2ea8-34d2-4a06-bcd0-18e28acd4566", "record_id": "flaws_cloudtrail:0000153:27fb2ea8-34d2-4a06-bcd0-18e28acd4566", "row_index": 153, "timestamp": "2017-02-19T23:38:40Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27fb2ea8-34d2-4a06-bcd0-18e28acd4566", "eventTime": "2017-02-19T23:38:40Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pageSize": 300}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32bfe66b-ef07-4bd9-876f-7b879d120c3a", "record_id": "flaws_cloudtrail:0000154:32bfe66b-ef07-4bd9-876f-7b879d120c3a", "row_index": 154, "timestamp": "2017-02-19T23:38:40Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32bfe66b-ef07-4bd9-876f-7b879d120c3a", "eventTime": "2017-02-19T23:38:40Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6b69fdf-9bde-4f4a-8d2b-4b1f5f840c29", "record_id": "flaws_cloudtrail:0000155:e6b69fdf-9bde-4f4a-8d2b-4b1f5f840c29", "row_index": 155, "timestamp": "2017-02-19T23:38:40Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6b69fdf-9bde-4f4a-8d2b-4b1f5f840c29", "eventTime": "2017-02-19T23:38:40Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3b4b734-8f37-4e40-8853-a28bf28b74d6", "record_id": "flaws_cloudtrail:0000156:f3b4b734-8f37-4e40-8853-a28bf28b74d6", "row_index": 156, "timestamp": "2017-02-19T23:38:40Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3b4b734-8f37-4e40-8853-a28bf28b74d6", "eventTime": "2017-02-19T23:38:40Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pageSize": 300}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c36842a-4584-45d5-83e6-dd66c53e5e5c", "record_id": "flaws_cloudtrail:0000157:c36842a-4584-45d5-83e6-dd66c53e5e5c", "row_index": 157, "timestamp": "2017-02-19T23:38:40Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c36842a-4584-45d5-83e6-dd66c53e5e5c", "eventTime": "2017-02-19T23:38:40Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"accountAttributeNameSet": {"items": [{"attributeName": "default-vpc"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7af5890e-0b84-4e44-b6a6-85449a32c", "record_id": "flaws_cloudtrail:0000158:7af5890e-0b84-4e44-b6a6-85449a32c", "row_index": 158, "timestamp": "2017-02-19T23:38:40Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7af5890e-0b84-4e44-b6a6-85449a32c", "eventTime": "2017-02-19T23:38:40Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adbc0657-5c1d-4057-a231-881029eea", "record_id": "flaws_cloudtrail:0000159:adbc0657-5c1d-4057-a231-881029eea", "row_index": 159, "timestamp": "2017-02-19T23:39:06Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIA3JSUOQCUGDDKXCAI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adbc0657-5c1d-4057-a231-881029eea", "eventTime": "2017-02-19T23:39:06Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIA3JSUOQCUGDDKXCAI", "userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "165f244d-1e9c-4d34-9d5a-b92b2801e9be", "record_id": "flaws_cloudtrail:0000160:165f244d-1e9c-4d34-9d5a-b92b2801e9be", "row_index": 160, "timestamp": "2017-02-19T23:39:44Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "165f244d-1e9c-4d34-9d5a-b92b2801e9be", "eventTime": "2017-02-19T23:39:44Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e97075c-dfbd-499c-8308-8174b665039", "record_id": "flaws_cloudtrail:0000161:e97075c-dfbd-499c-8308-8174b665039", "row_index": 161, "timestamp": "2017-02-19T23:39:44Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e97075c-dfbd-499c-8308-8174b665039", "eventTime": "2017-02-19T23:39:44Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5e87f73-0426-44c3-843d-0050b76feaf7", "record_id": "flaws_cloudtrail:0000162:b5e87f73-0426-44c3-843d-0050b76feaf7", "row_index": 162, "timestamp": "2017-02-19T23:39:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5e87f73-0426-44c3-843d-0050b76feaf7", "eventTime": "2017-02-19T23:39:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ecd3769-1593-48bc-bc95-68b242928d11f", "record_id": "flaws_cloudtrail:0000163:1ecd3769-1593-48bc-bc95-68b242928d11f", "row_index": 163, "timestamp": "2017-02-19T23:39:45Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ecd3769-1593-48bc-bc95-68b242928d11f", "eventTime": "2017-02-19T23:39:45Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68c1b6eb-6c59-486b-85cd-b88bbe6574fa", "record_id": "flaws_cloudtrail:0000164:68c1b6eb-6c59-486b-85cd-b88bbe6574fa", "row_index": 164, "timestamp": "2017-02-19T23:39:54Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68c1b6eb-6c59-486b-85cd-b88bbe6574fa", "eventTime": "2017-02-19T23:39:54Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxResults": 10000, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b97b228-aada-495b-944f-88f6c171959e", "record_id": "flaws_cloudtrail:0000165:9b97b228-aada-495b-944f-88f6c171959e", "row_index": 165, "timestamp": "2017-02-19T23:40:01Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b97b228-aada-495b-944f-88f6c171959e", "eventTime": "2017-02-19T23:40:01Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a74d7e0-99d8-400a-bd32-6dc7e53994e0", "record_id": "flaws_cloudtrail:0000166:0a74d7e0-99d8-400a-bd32-6dc7e53994e0", "row_index": 166, "timestamp": "2017-02-19T23:40:01Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a74d7e0-99d8-400a-bd32-6dc7e53994e0", "eventTime": "2017-02-19T23:40:01Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82180cef-dc3a-4d46-8c78-4901b67a2ace", "record_id": "flaws_cloudtrail:0000167:82180cef-dc3a-4d46-8c78-4901b67a2ace", "row_index": 167, "timestamp": "2017-02-19T23:40:01Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82180cef-dc3a-4d46-8c78-4901b67a2ace", "eventTime": "2017-02-19T23:40:01Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00bd4cbf-37e7-41e7-8340-28ccbe8334bf", "record_id": "flaws_cloudtrail:0000168:00bd4cbf-37e7-41e7-8340-28ccbe8334bf", "row_index": 168, "timestamp": "2017-02-19T23:40:01Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00bd4cbf-37e7-41e7-8340-28ccbe8334bf", "eventTime": "2017-02-19T23:40:01Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxResults": 10000, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ba33e88-445a-4799-83b3-c13041a1e85c", "record_id": "flaws_cloudtrail:0000169:2ba33e88-445a-4799-83b3-c13041a1e85c", "row_index": 169, "timestamp": "2017-02-19T23:40:01Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ba33e88-445a-4799-83b3-c13041a1e85c", "eventTime": "2017-02-19T23:40:01Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54fd4b1e-d6f2-4260-9044-b7aa9e9b7ee6", "record_id": "flaws_cloudtrail:0000170:54fd4b1e-d6f2-4260-9044-b7aa9e9b7ee6", "row_index": 170, "timestamp": "2017-02-19T23:40:01Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54fd4b1e-d6f2-4260-9044-b7aa9e9b7ee6", "eventTime": "2017-02-19T23:40:01Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21246-539d-421f-a16e-7f8e6b9fa18b", "record_id": "flaws_cloudtrail:0000171:21246-539d-421f-a16e-7f8e6b9fa18b", "row_index": 171, "timestamp": "2017-02-19T23:40:01Z", "event_type": "DescribeVolumesModifications", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21246-539d-421f-a16e-7f8e6b9fa18b", "eventTime": "2017-02-19T23:40:01Z", "eventName": "DescribeVolumesModifications", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"DescribeVolumesModificationsRequest": {"MaxResults": "1000"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e9846b9-aab7-4327-b5d3-b2434d7fee4c", "record_id": "flaws_cloudtrail:0000172:7e9846b9-aab7-4327-b5d3-b2434d7fee4c", "row_index": 172, "timestamp": "2017-02-19T23:40:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e9846b9-aab7-4327-b5d3-b2434d7fee4c", "eventTime": "2017-02-19T23:40:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13757-1b7c-4293-8486-f6a05192d6", "record_id": "flaws_cloudtrail:0000173:13757-1b7c-4293-8486-f6a05192d6", "row_index": 173, "timestamp": "2017-02-19T23:40:01Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13757-1b7c-4293-8486-f6a05192d6", "eventTime": "2017-02-19T23:40:01Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60b70d0a-70cc-44a9-95fb-7b2b652aac8e", "record_id": "flaws_cloudtrail:0000174:60b70d0a-70cc-44a9-95fb-7b2b652aac8e", "row_index": 174, "timestamp": "2017-02-19T23:40:04Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIA3JSUOQCUGDDKXCAI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60b70d0a-70cc-44a9-95fb-7b2b652aac8e", "eventTime": "2017-02-19T23:40:04Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIA3JSUOQCUGDDKXCAI", "userName": "Level5"}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2af7ba6-840c-4d00-9d6d-4444e9619d07", "record_id": "flaws_cloudtrail:0000175:a2af7ba6-840c-4d00-9d6d-4444e9619d07", "row_index": 175, "timestamp": "2017-02-19T23:40:09Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2af7ba6-840c-4d00-9d6d-4444e9619d07", "eventTime": "2017-02-19T23:40:09Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pageSize": 300}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "519851-cb55-487e-9644-515429bd2ee6", "record_id": "flaws_cloudtrail:0000176:519851-cb55-487e-9644-515429bd2ee6", "row_index": 176, "timestamp": "2017-02-19T23:45:24Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "519851-cb55-487e-9644-515429bd2ee6", "eventTime": "2017-02-19T23:45:24Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f76d61f0-8113-4c92-adba-1b5dc8713900", "record_id": "flaws_cloudtrail:0000177:f76d61f0-8113-4c92-adba-1b5dc8713900", "row_index": 177, "timestamp": "2017-02-19T23:45:26Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f76d61f0-8113-4c92-adba-1b5dc8713900", "eventTime": "2017-02-19T23:45:26Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d0ae29d-7892-4f8f-9f30-e922c880286b9", "record_id": "flaws_cloudtrail:0000178:3d0ae29d-7892-4f8f-9f30-e922c880286b9", "row_index": 178, "timestamp": "2017-02-19T23:45:26Z", "event_type": "GetDeployments", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d0ae29d-7892-4f8f-9f30-e922c880286b9", "eventTime": "2017-02-19T23:45:26Z", "eventName": "GetDeployments", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9eedb3f0-5b7e-4c73-9d3e-974d37d3dfc2", "record_id": "flaws_cloudtrail:0000179:9eedb3f0-5b7e-4c73-9d3e-974d37d3dfc2", "row_index": 179, "timestamp": "2017-02-19T23:45:26Z", "event_type": "GetSdkTypes", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9eedb3f0-5b7e-4c73-9d3e-974d37d3dfc2", "eventTime": "2017-02-19T23:45:26Z", "eventName": "GetSdkTypes", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4ec285f-1183-467b-a69f-b556d9b1d7a3", "record_id": "flaws_cloudtrail:0000180:a4ec285f-1183-467b-a69f-b556d9b1d7a3", "row_index": 180, "timestamp": "2017-02-19T23:45:26Z", "event_type": "GetClientCertificates", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4ec285f-1183-467b-a69f-b556d9b1d7a3", "eventTime": "2017-02-19T23:45:26Z", "eventName": "GetClientCertificates", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03b29df6-8848-49d9-8da9-0f99e526e5a9", "record_id": "flaws_cloudtrail:0000181:03b29df6-8848-49d9-8da9-0f99e526e5a9", "row_index": 181, "timestamp": "2017-02-19T23:45:27Z", "event_type": "GetDocumentationVersions", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03b29df6-8848-49d9-8da9-0f99e526e5a9", "eventTime": "2017-02-19T23:45:27Z", "eventName": "GetDocumentationVersions", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 100, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0bc0670-2945-4b49-9af9-086c7924f73a", "record_id": "flaws_cloudtrail:0000182:f0bc0670-2945-4b49-9af9-086c7924f73a", "row_index": 182, "timestamp": "2017-02-19T23:45:41Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0bc0670-2945-4b49-9af9-086c7924f73a", "eventTime": "2017-02-19T23:45:41Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "577473cf-cf80-40bb-b5f4-c082054cb7f7", "record_id": "flaws_cloudtrail:0000183:577473cf-cf80-40bb-b5f4-c082054cb7f7", "row_index": 183, "timestamp": "2017-02-19T23:45:41Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "577473cf-cf80-40bb-b5f4-c082054cb7f7", "eventTime": "2017-02-19T23:45:41Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bef90a41-fe59-4e82-bfaf-39f937f73b07", "record_id": "flaws_cloudtrail:0000184:bef90a41-fe59-4e82-bfaf-39f937f73b07", "row_index": 184, "timestamp": "2017-02-19T23:45:43Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bef90a41-fe59-4e82-bfaf-39f937f73b07", "eventTime": "2017-02-19T23:45:43Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a88405c-8810-43ce-a9f8-5d41658", "record_id": "flaws_cloudtrail:0000185:a88405c-8810-43ce-a9f8-5d41658", "row_index": 185, "timestamp": "2017-02-19T23:45:43Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a88405c-8810-43ce-a9f8-5d41658", "eventTime": "2017-02-19T23:45:43Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "656365ed6-2f00-4ada-850a-17863980ccef", "record_id": "flaws_cloudtrail:0000186:656365ed6-2f00-4ada-850a-17863980ccef", "row_index": 186, "timestamp": "2017-02-19T23:45:44Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "656365ed6-2f00-4ada-850a-17863980ccef", "eventTime": "2017-02-19T23:45:44Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "embed": ["methods"], "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c276f40-85db-4eb6-812d-ac243850a23e", "record_id": "flaws_cloudtrail:0000187:3c276f40-85db-4eb6-812d-ac243850a23e", "row_index": 187, "timestamp": "2017-02-19T23:45:45Z", "event_type": "GetUsagePlans", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c276f40-85db-4eb6-812d-ac243850a23e", "eventTime": "2017-02-19T23:45:45Z", "eventName": "GetUsagePlans", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5677b2c2-475b-4980-8c3e-3540061cc01b", "record_id": "flaws_cloudtrail:0000188:5677b2c2-475b-4980-8c3e-3540061cc01b", "row_index": 188, "timestamp": "2017-02-19T23:45:45Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5677b2c2-475b-4980-8c3e-3540061cc01b", "eventTime": "2017-02-19T23:45:45Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4db641b5-c714-47c1-8bfd-58cca52ae5ad", "record_id": "flaws_cloudtrail:0000189:4db641b5-c714-47c1-8bfd-58cca52ae5ad", "row_index": 189, "timestamp": "2017-02-19T23:45:45Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4db641b5-c714-47c1-8bfd-58cca52ae5ad", "eventTime": "2017-02-19T23:45:45Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "414fdf3c-b404-4874-9bb2-640b1c8297d3", "record_id": "flaws_cloudtrail:0000190:414fdf3c-b404-4874-9bb2-640b1c8297d3", "row_index": 190, "timestamp": "2017-02-19T23:45:48Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "414fdf3c-b404-4874-9bb2-640b1c8297d3", "eventTime": "2017-02-19T23:45:48Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab0986a3-45ce-40c1-b4cf-4390e1528985", "record_id": "flaws_cloudtrail:0000191:ab0986a3-45ce-40c1-b4cf-4390e1528985", "row_index": 191, "timestamp": "2017-02-19T23:45:48Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab0986a3-45ce-40c1-b4cf-4390e1528985", "eventTime": "2017-02-19T23:45:48Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92757-74cb-4aea-882c-74a72a6e292d", "record_id": "flaws_cloudtrail:0000192:92757-74cb-4aea-882c-74a72a6e292d", "row_index": 192, "timestamp": "2017-02-19T23:45:50Z", "event_type": "GetDeployment", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92757-74cb-4aea-882c-74a72a6e292d", "eventTime": "2017-02-19T23:45:50Z", "eventName": "GetDeployment", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"deploymentId": "f1ibpo", "restApiId": "puspzvwgb6", "embed": ["apisummary"], "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "575d51a6-1270-4d7d-aeb7-844606c2ee14a", "record_id": "flaws_cloudtrail:0000193:575d51a6-1270-4d7d-aeb7-844606c2ee14a", "row_index": 193, "timestamp": "2017-02-19T23:45:52Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "575d51a6-1270-4d7d-aeb7-844606c2ee14a", "eventTime": "2017-02-19T23:45:52Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "933efe75-f62c-4788-93d3-906ebd26bbc0", "record_id": "flaws_cloudtrail:0000194:933efe75-f62c-4788-93d3-906ebd26bbc0", "row_index": 194, "timestamp": "2017-02-19T23:45:55Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "933efe75-f62c-4788-93d3-906ebd26bbc0", "eventTime": "2017-02-19T23:45:55Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d10218a6-e341-457b-9d83-d1130ecb3dfe", "record_id": "flaws_cloudtrail:0000195:d10218a6-e341-457b-9d83-d1130ecb3dfe", "row_index": 195, "timestamp": "2017-02-19T23:45:55Z", "event_type": "GetUsagePlans", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d10218a6-e341-457b-9d83-d1130ecb3dfe", "eventTime": "2017-02-19T23:45:55Z", "eventName": "GetUsagePlans", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23a0edcb-62a7-40f4-a847-4fc2a46a152a", "record_id": "flaws_cloudtrail:0000196:23a0edcb-62a7-40f4-a847-4fc2a46a152a", "row_index": 196, "timestamp": "2017-02-19T23:45:55Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23a0edcb-62a7-40f4-a847-4fc2a46a152a", "eventTime": "2017-02-19T23:45:55Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "embed": ["methods"], "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61483-3446-4436-897d-c4c0c7f7f7a1", "record_id": "flaws_cloudtrail:0000197:61483-3446-4436-897d-c4c0c7f7f7a1", "row_index": 197, "timestamp": "2017-02-19T23:45:55Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61483-3446-4436-897d-c4c0c7f7f7a1", "eventTime": "2017-02-19T23:45:55Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2af61d33-6a2b-4958-b468-e33fd032a3ef", "record_id": "flaws_cloudtrail:0000198:2af61d33-6a2b-4958-b468-e33fd032a3ef", "row_index": 198, "timestamp": "2017-02-19T23:45:57Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2af61d33-6a2b-4958-b468-e33fd032a3ef", "eventTime": "2017-02-19T23:45:57Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "647710-5d8a-4fd8-80b9-33646edf83", "record_id": "flaws_cloudtrail:0000199:647710-5d8a-4fd8-80b9-33646edf83", "row_index": 199, "timestamp": "2017-02-19T23:45:57Z", "event_type": "GetClientCertificates", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "647710-5d8a-4fd8-80b9-33646edf83", "eventTime": "2017-02-19T23:45:57Z", "eventName": "GetClientCertificates", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f664c37-a850-41c6-8e99-b5b60301", "record_id": "flaws_cloudtrail:0000200:0f664c37-a850-41c6-8e99-b5b60301", "row_index": 200, "timestamp": "2017-02-19T23:45:57Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f664c37-a850-41c6-8e99-b5b60301", "eventTime": "2017-02-19T23:45:57Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae6b65f2-763e-4a75-bdef-8a93e922fb60", "record_id": "flaws_cloudtrail:0000201:ae6b65f2-763e-4a75-bdef-8a93e922fb60", "row_index": 201, "timestamp": "2017-02-19T23:45:57Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae6b65f2-763e-4a75-bdef-8a93e922fb60", "eventTime": "2017-02-19T23:45:57Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05ec38ba-a1d7-43b5-8396-f8d7c136f9a2", "record_id": "flaws_cloudtrail:0000202:05ec38ba-a1d7-43b5-8396-f8d7c136f9a2", "row_index": 202, "timestamp": "2017-02-19T23:45:57Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05ec38ba-a1d7-43b5-8396-f8d7c136f9a2", "eventTime": "2017-02-19T23:45:57Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "017b04ca-fd5b-47f6-b6a7-d21ee7bef95f", "record_id": "flaws_cloudtrail:0000203:017b04ca-fd5b-47f6-b6a7-d21ee7bef95f", "row_index": 203, "timestamp": "2017-02-19T23:47:41Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAV0W5A9ZFNI1F92T6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.255.9.149", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "017b04ca-fd5b-47f6-b6a7-d21ee7bef95f", "eventTime": "2017-02-19T23:47:41Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.255.9.149", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAV0W5A9ZFNI1F92T6", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68d818a6-0c10-481f-8986-646dec55bc75", "record_id": "flaws_cloudtrail:0000204:68d818a6-0c10-481f-8986-646dec55bc75", "row_index": 204, "timestamp": "2017-02-19T23:47:41Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAV0W5A9ZFNI1F92T6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.255.9.149", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68d818a6-0c10-481f-8986-646dec55bc75", "eventTime": "2017-02-19T23:47:41Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.255.9.149", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAV0W5A9ZFNI1F92T6", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxResults": 10000, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b497c0f-e9ff-44b3-b3cf-5640747fc387", "record_id": "flaws_cloudtrail:0000205:4b497c0f-e9ff-44b3-b3cf-5640747fc387", "row_index": 205, "timestamp": "2017-02-19T23:47:41Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAV0W5A9ZFNI1F92T6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.255.9.149", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b497c0f-e9ff-44b3-b3cf-5640747fc387", "eventTime": "2017-02-19T23:47:41Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.255.9.149", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAV0W5A9ZFNI1F92T6", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab0feb5d-9de1-4f11-a486-c3fd8ae73e48", "record_id": "flaws_cloudtrail:0000206:ab0feb5d-9de1-4f11-a486-c3fd8ae73e48", "row_index": 206, "timestamp": "2017-02-19T23:47:41Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAV0W5A9ZFNI1F92T6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.255.9.149", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab0feb5d-9de1-4f11-a486-c3fd8ae73e48", "eventTime": "2017-02-19T23:47:41Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.255.9.149", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAV0W5A9ZFNI1F92T6", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c26b61b-72e4-4e13-b35e-baed4e27d248", "record_id": "flaws_cloudtrail:0000207:8c26b61b-72e4-4e13-b35e-baed4e27d248", "row_index": 207, "timestamp": "2017-02-19T23:47:41Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAV0W5A9ZFNI1F92T6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.255.9.149", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c26b61b-72e4-4e13-b35e-baed4e27d248", "eventTime": "2017-02-19T23:47:41Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.255.9.149", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAV0W5A9ZFNI1F92T6", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6bf1510-32c3-46b0-a00d-46d490002757", "record_id": "flaws_cloudtrail:0000208:a6bf1510-32c3-46b0-a00d-46d490002757", "row_index": 208, "timestamp": "2017-02-19T23:47:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAV0W5A9ZFNI1F92T6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.255.9.149", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6bf1510-32c3-46b0-a00d-46d490002757", "eventTime": "2017-02-19T23:47:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.255.9.149", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAV0W5A9ZFNI1F92T6", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea5be6d3-6c1b-4dc9-a49b-05a12c4ef465", "record_id": "flaws_cloudtrail:0000209:ea5be6d3-6c1b-4dc9-a49b-05a12c4ef465", "row_index": 209, "timestamp": "2017-02-19T23:47:41Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAV0W5A9ZFNI1F92T6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.255.9.149", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea5be6d3-6c1b-4dc9-a49b-05a12c4ef465", "eventTime": "2017-02-19T23:47:41Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.255.9.149", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAV0W5A9ZFNI1F92T6", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3983b4f8-0340-4931-9b3f-094802ee25a6", "record_id": "flaws_cloudtrail:0000210:3983b4f8-0340-4931-9b3f-094802ee25a6", "row_index": 210, "timestamp": "2017-02-19T23:47:41Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAV0W5A9ZFNI1F92T6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.255.9.149", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3983b4f8-0340-4931-9b3f-094802ee25a6", "eventTime": "2017-02-19T23:47:41Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.255.9.149", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAV0W5A9ZFNI1F92T6", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e58a4932-3c36-48b4-a61f-bba8b277b2bc", "record_id": "flaws_cloudtrail:0000211:e58a4932-3c36-48b4-a61f-bba8b277b2bc", "row_index": 211, "timestamp": "2017-02-19T23:47:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAV0W5A9ZFNI1F92T6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.255.9.149", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e58a4932-3c36-48b4-a61f-bba8b277b2bc", "eventTime": "2017-02-19T23:47:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.255.9.149", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAV0W5A9ZFNI1F92T6", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9e8f87a-eb97-4b7c-8d6b-a69c37a53af3", "record_id": "flaws_cloudtrail:0000212:a9e8f87a-eb97-4b7c-8d6b-a69c37a53af3", "row_index": 212, "timestamp": "2017-02-19T23:47:41Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAV0W5A9ZFNI1F92T6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.255.9.149", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9e8f87a-eb97-4b7c-8d6b-a69c37a53af3", "eventTime": "2017-02-19T23:47:41Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.255.9.149", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAV0W5A9ZFNI1F92T6", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2a5380d-a09c-4def-9c29-1f391796c65", "record_id": "flaws_cloudtrail:0000213:f2a5380d-a09c-4def-9c29-1f391796c65", "row_index": 213, "timestamp": "2017-02-19T23:47:41Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAV0W5A9ZFNI1F92T6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.255.9.149", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2a5380d-a09c-4def-9c29-1f391796c65", "eventTime": "2017-02-19T23:47:41Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.255.9.149", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAV0W5A9ZFNI1F92T6", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0503de5-5f2d-4f2e-94d7-0b39edb81646", "record_id": "flaws_cloudtrail:0000214:e0503de5-5f2d-4f2e-94d7-0b39edb81646", "row_index": 214, "timestamp": "2017-02-19T23:47:41Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAV0W5A9ZFNI1F92T6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.255.9.149", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0503de5-5f2d-4f2e-94d7-0b39edb81646", "eventTime": "2017-02-19T23:47:41Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.255.9.149", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAV0W5A9ZFNI1F92T6", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0099bfa-ee81-4e18-9259-ac65429dc", "record_id": "flaws_cloudtrail:0000215:a0099bfa-ee81-4e18-9259-ac65429dc", "row_index": 215, "timestamp": "2017-02-19T23:47:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAV0W5A9ZFNI1F92T6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.255.9.149", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0099bfa-ee81-4e18-9259-ac65429dc", "eventTime": "2017-02-19T23:47:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.255.9.149", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAV0W5A9ZFNI1F92T6", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53e7fcb5-f55e-4bc5-8a7e-8e5b538c8a95", "record_id": "flaws_cloudtrail:0000216:53e7fcb5-f55e-4bc5-8a7e-8e5b538c8a95", "row_index": 216, "timestamp": "2017-02-19T23:47:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53e7fcb5-f55e-4bc5-8a7e-8e5b538c8a95", "eventTime": "2017-02-19T23:47:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pageSize": 300}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c954a68-d180-4aa0-adfe-db0522d15ade", "record_id": "flaws_cloudtrail:0000217:4c954a68-d180-4aa0-adfe-db0522d15ade", "row_index": 217, "timestamp": "2017-02-19T23:47:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c954a68-d180-4aa0-adfe-db0522d15ade", "eventTime": "2017-02-19T23:47:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pageSize": 300}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f99da9e-19d3-4576-a677-289d3ef642ea", "record_id": "flaws_cloudtrail:0000218:2f99da9e-19d3-4576-a677-289d3ef642ea", "row_index": 218, "timestamp": "2017-02-19T23:47:43Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f99da9e-19d3-4576-a677-289d3ef642ea", "eventTime": "2017-02-19T23:47:43Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db9d9639-394c-484f-9a78-247a66d68cf1", "record_id": "flaws_cloudtrail:0000219:db9d9639-394c-484f-9a78-247a66d68cf1", "row_index": 219, "timestamp": "2017-02-19T23:47:43Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db9d9639-394c-484f-9a78-247a66d68cf1", "eventTime": "2017-02-19T23:47:43Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"DescribeHostsRequest": {"Filter": {"Value": {"tag": "1", "content": "available"}, "tag": "1", "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c7c558b-2eb7-479f-9ad0-50f18f513bd4", "record_id": "flaws_cloudtrail:0000220:8c7c558b-2eb7-479f-9ad0-50f18f513bd4", "row_index": 220, "timestamp": "2017-02-19T23:47:43Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c7c558b-2eb7-479f-9ad0-50f18f513bd4", "eventTime": "2017-02-19T23:47:43Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f256be99-0827-4fab-bc86-f4b8e28c36fc", "record_id": "flaws_cloudtrail:0000221:f256be99-0827-4fab-bc86-f4b8e28c36fc", "row_index": 221, "timestamp": "2017-02-19T23:47:43Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f256be99-0827-4fab-bc86-f4b8e28c36fc", "eventTime": "2017-02-19T23:47:43Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3f7f390-8944-4bbb-b7e1-9573f5d5dbe5", "record_id": "flaws_cloudtrail:0000222:a3f7f390-8944-4bbb-b7e1-9573f5d5dbe5", "row_index": 222, "timestamp": "2017-02-19T23:47:43Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3f7f390-8944-4bbb-b7e1-9573f5d5dbe5", "eventTime": "2017-02-19T23:47:43Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78136-514e-43c0-8518-ff1c0ecbe858", "record_id": "flaws_cloudtrail:0000223:78136-514e-43c0-8518-ff1c0ecbe858", "row_index": 223, "timestamp": "2017-02-19T23:47:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78136-514e-43c0-8518-ff1c0ecbe858", "eventTime": "2017-02-19T23:47:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95999-078a-44ff-b645-df2ca9af95b4", "record_id": "flaws_cloudtrail:0000224:95999-078a-44ff-b645-df2ca9af95b4", "row_index": 224, "timestamp": "2017-02-19T23:47:43Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95999-078a-44ff-b645-df2ca9af95b4", "eventTime": "2017-02-19T23:47:43Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "caed04c9-c63d-42e4-a2ab-47d7ab9325b0", "record_id": "flaws_cloudtrail:0000225:caed04c9-c63d-42e4-a2ab-47d7ab9325b0", "row_index": 225, "timestamp": "2017-02-19T23:47:43Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "caed04c9-c63d-42e4-a2ab-47d7ab9325b0", "eventTime": "2017-02-19T23:47:43Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"accountAttributeNameSet": {"items": [{"attributeName": "supported-platforms"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d951df8-6a79-4f1b-a725-1fe0808cb3fc", "record_id": "flaws_cloudtrail:0000226:4d951df8-6a79-4f1b-a725-1fe0808cb3fc", "row_index": 226, "timestamp": "2017-02-19T23:47:43Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d951df8-6a79-4f1b-a725-1fe0808cb3fc", "eventTime": "2017-02-19T23:47:43Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5df545a5-fef5-4cbb-afd6-bc12d8bf4def", "record_id": "flaws_cloudtrail:0000227:5df545a5-fef5-4cbb-afd6-bc12d8bf4def", "row_index": 227, "timestamp": "2017-02-19T23:47:43Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5df545a5-fef5-4cbb-afd6-bc12d8bf4def", "eventTime": "2017-02-19T23:47:43Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"accountAttributeNameSet": {"items": [{"attributeName": "default-vpc"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e1f2419-fcb5-4bf9-8cea-0733807a5fa1", "record_id": "flaws_cloudtrail:0000228:7e1f2419-fcb5-4bf9-8cea-0733807a5fa1", "row_index": 228, "timestamp": "2017-02-19T23:47:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e1f2419-fcb5-4bf9-8cea-0733807a5fa1", "eventTime": "2017-02-19T23:47:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "499cf168-48a3-4005-8086-44d5312ef65e", "record_id": "flaws_cloudtrail:0000229:499cf168-48a3-4005-8086-44d5312ef65e", "row_index": 229, "timestamp": "2017-02-19T23:47:43Z", "event_type": "DescribePlacementGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "499cf168-48a3-4005-8086-44d5312ef65e", "eventTime": "2017-02-19T23:47:43Z", "eventName": "DescribePlacementGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"placementGroupSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e37fad2c-d156-4c17-90b2-539d6765d747", "record_id": "flaws_cloudtrail:0000230:e37fad2c-d156-4c17-90b2-539d6765d747", "row_index": 230, "timestamp": "2017-02-19T23:47:43Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e37fad2c-d156-4c17-90b2-539d6765d747", "eventTime": "2017-02-19T23:47:43Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7cf9aec-49e6-4cbb-afc4-951c248c8a66", "record_id": "flaws_cloudtrail:0000231:f7cf9aec-49e6-4cbb-afc4-951c248c8a66", "row_index": 231, "timestamp": "2017-02-19T23:47:50Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7cf9aec-49e6-4cbb-afc4-951c248c8a66", "eventTime": "2017-02-19T23:47:50Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pageSize": 300}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe200e68-210e-4617-9696-994494f265fbd", "record_id": "flaws_cloudtrail:0000232:fe200e68-210e-4617-9696-994494f265fbd", "row_index": 232, "timestamp": "2017-02-19T23:47:50Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe200e68-210e-4617-9696-994494f265fbd", "eventTime": "2017-02-19T23:47:50Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pageSize": 300}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9daf4ab-2e09-4d14-93ba-92f2676e7394", "record_id": "flaws_cloudtrail:0000233:f9daf4ab-2e09-4d14-93ba-92f2676e7394", "row_index": 233, "timestamp": "2017-02-19T23:47:57Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9daf4ab-2e09-4d14-93ba-92f2676e7394", "eventTime": "2017-02-19T23:47:57Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pageSize": 300}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "565051b-b3b6-4a20-a00b-e05621117396", "record_id": "flaws_cloudtrail:0000234:565051b-b3b6-4a20-a00b-e05621117396", "row_index": 234, "timestamp": "2017-02-19T23:47:57Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "565051b-b3b6-4a20-a00b-e05621117396", "eventTime": "2017-02-19T23:47:57Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b49d9c31-c83e-4e11-8f00-2e20a21b8884", "record_id": "flaws_cloudtrail:0000235:b49d9c31-c83e-4e11-8f00-2e20a21b8884", "row_index": 235, "timestamp": "2017-02-19T23:47:57Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b49d9c31-c83e-4e11-8f00-2e20a21b8884", "eventTime": "2017-02-19T23:47:57Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pageSize": 300}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8b017ae-bb8e-4d53-a6a8-39e02a59e905", "record_id": "flaws_cloudtrail:0000236:e8b017ae-bb8e-4d53-a6a8-39e02a59e905", "row_index": 236, "timestamp": "2017-02-19T23:47:57Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8b017ae-bb8e-4d53-a6a8-39e02a59e905", "eventTime": "2017-02-19T23:47:57Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74ee914e-c80f-49b4-8c36-f6f6b23c9ce7", "record_id": "flaws_cloudtrail:0000237:74ee914e-c80f-49b4-8c36-f6f6b23c9ce7", "row_index": 237, "timestamp": "2017-02-19T23:47:58Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74ee914e-c80f-49b4-8c36-f6f6b23c9ce7", "eventTime": "2017-02-19T23:47:58Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "694ca99e-28b9-4449-9572-a24c7ef32af1", "record_id": "flaws_cloudtrail:0000238:694ca99e-28b9-4449-9572-a24c7ef32af1", "row_index": 238, "timestamp": "2017-02-19T23:47:58Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "694ca99e-28b9-4449-9572-a24c7ef32af1", "eventTime": "2017-02-19T23:47:58Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3ceb55b-9b73-49e7-b7ff-acfc38408646", "record_id": "flaws_cloudtrail:0000239:b3ceb55b-9b73-49e7-b7ff-acfc38408646", "row_index": 239, "timestamp": "2017-02-19T23:48:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3ceb55b-9b73-49e7-b7ff-acfc38408646", "eventTime": "2017-02-19T23:48:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3483a85b-4e96-4632-9328-a2ec0ae531c5", "record_id": "flaws_cloudtrail:0000240:3483a85b-4e96-4632-9328-a2ec0ae531c5", "row_index": 240, "timestamp": "2017-02-19T23:48:45Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3483a85b-4e96-4632-9328-a2ec0ae531c5", "eventTime": "2017-02-19T23:48:45Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28e0c35a-724d-4457-8000-bd70c1e9ea49", "record_id": "flaws_cloudtrail:0000241:28e0c35a-724d-4457-8000-bd70c1e9ea49", "row_index": 241, "timestamp": "2017-02-19T23:48:45Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28e0c35a-724d-4457-8000-bd70c1e9ea49", "eventTime": "2017-02-19T23:48:45Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "738a98ea-3c96-4359-b053-814efba79bb8", "record_id": "flaws_cloudtrail:0000242:738a98ea-3c96-4359-b053-814efba79bb8", "row_index": 242, "timestamp": "2017-02-19T23:48:47Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "738a98ea-3c96-4359-b053-814efba79bb8", "eventTime": "2017-02-19T23:48:47Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxResults": 10000, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd799e14-e03e-42b4-9a9a-7f786ea3dcbc", "record_id": "flaws_cloudtrail:0000243:cd799e14-e03e-42b4-9a9a-7f786ea3dcbc", "row_index": 243, "timestamp": "2017-02-19T23:48:51Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd799e14-e03e-42b4-9a9a-7f786ea3dcbc", "eventTime": "2017-02-19T23:48:51Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26b43503-dbbd-4da9-8a41-9d320e88ea54", "record_id": "flaws_cloudtrail:0000244:26b43503-dbbd-4da9-8a41-9d320e88ea54", "row_index": 244, "timestamp": "2017-02-19T23:48:51Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26b43503-dbbd-4da9-8a41-9d320e88ea54", "eventTime": "2017-02-19T23:48:51Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4230bbe-867b-4ed7-9e75-90b38b8d2391", "record_id": "flaws_cloudtrail:0000245:d4230bbe-867b-4ed7-9e75-90b38b8d2391", "row_index": 245, "timestamp": "2017-02-19T23:48:53Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4230bbe-867b-4ed7-9e75-90b38b8d2391", "eventTime": "2017-02-19T23:48:53Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pageSize": 300}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69e5fb8c-de81-454d-989a-8bbc111ba8e9", "record_id": "flaws_cloudtrail:0000246:69e5fb8c-de81-454d-989a-8bbc111ba8e9", "row_index": 246, "timestamp": "2017-02-19T23:48:59Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69e5fb8c-de81-454d-989a-8bbc111ba8e9", "eventTime": "2017-02-19T23:48:59Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b8dca1c-c859-480a-b108-b703a8a12603", "record_id": "flaws_cloudtrail:0000247:8b8dca1c-c859-480a-b108-b703a8a12603", "row_index": 247, "timestamp": "2017-02-19T23:48:59Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b8dca1c-c859-480a-b108-b703a8a12603", "eventTime": "2017-02-19T23:48:59Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d5bf578-e5cc-4da6-8055-c095187", "record_id": "flaws_cloudtrail:0000248:5d5bf578-e5cc-4da6-8055-c095187", "row_index": 248, "timestamp": "2017-02-19T23:48:59Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d5bf578-e5cc-4da6-8055-c095187", "eventTime": "2017-02-19T23:48:59Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d75b8ad-ce7d-4c27-b4ea-339080d69c1a", "record_id": "flaws_cloudtrail:0000249:1d75b8ad-ce7d-4c27-b4ea-339080d69c1a", "row_index": 249, "timestamp": "2017-02-19T23:48:59Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d75b8ad-ce7d-4c27-b4ea-339080d69c1a", "eventTime": "2017-02-19T23:48:59Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfcefea9-aba4-4869-8cab-1d1e7c408927", "record_id": "flaws_cloudtrail:0000250:cfcefea9-aba4-4869-8cab-1d1e7c408927", "row_index": 250, "timestamp": "2017-02-19T23:48:59Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfcefea9-aba4-4869-8cab-1d1e7c408927", "eventTime": "2017-02-19T23:48:59Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "448104-40f7-4ccd-b8b1-333b5fb95d0d", "record_id": "flaws_cloudtrail:0000251:448104-40f7-4ccd-b8b1-333b5fb95d0d", "row_index": 251, "timestamp": "2017-02-19T23:48:59Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "448104-40f7-4ccd-b8b1-333b5fb95d0d", "eventTime": "2017-02-19T23:48:59Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxResults": 10000, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8be697be-dbcd-437e-af21-a16d51a713911", "record_id": "flaws_cloudtrail:0000252:8be697be-dbcd-437e-af21-a16d51a713911", "row_index": 252, "timestamp": "2017-02-19T23:48:59Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8be697be-dbcd-437e-af21-a16d51a713911", "eventTime": "2017-02-19T23:48:59Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3c4c368-ad6c-4654-8617-f99f5e0948de", "record_id": "flaws_cloudtrail:0000253:e3c4c368-ad6c-4654-8617-f99f5e0948de", "row_index": 253, "timestamp": "2017-02-19T23:48:59Z", "event_type": "DescribeVolumesModifications", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3c4c368-ad6c-4654-8617-f99f5e0948de", "eventTime": "2017-02-19T23:48:59Z", "eventName": "DescribeVolumesModifications", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"DescribeVolumesModificationsRequest": {"MaxResults": "1000"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b39e2720-561c-40d9-9001-2ee66376c02d", "record_id": "flaws_cloudtrail:0000254:b39e2720-561c-40d9-9001-2ee66376c02d", "row_index": 254, "timestamp": "2017-02-19T23:49:00Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b39e2720-561c-40d9-9001-2ee66376c02d", "eventTime": "2017-02-19T23:49:00Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pageSize": 300}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "623ff5f3-8d6d-4e24-a8f8-f1cfc3c67bee", "record_id": "flaws_cloudtrail:0000255:623ff5f3-8d6d-4e24-a8f8-f1cfc3c67bee", "row_index": 255, "timestamp": "2017-02-19T23:49:01Z", "event_type": "DescribeTargetGroups", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "623ff5f3-8d6d-4e24-a8f8-f1cfc3c67bee", "eventTime": "2017-02-19T23:49:01Z", "eventName": "DescribeTargetGroups", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pageSize": 300}, "responseElements": {"targetGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca678924f-18c5-4ff4-94e5-c6303b9f7191", "record_id": "flaws_cloudtrail:0000256:ca678924f-18c5-4ff4-94e5-c6303b9f7191", "row_index": 256, "timestamp": "2017-02-19T23:49:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca678924f-18c5-4ff4-94e5-c6303b9f7191", "eventTime": "2017-02-19T23:49:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53f7621a-583b-469a-a7a4-3d7617f48d67", "record_id": "flaws_cloudtrail:0000257:53f7621a-583b-469a-a7a4-3d7617f48d67", "row_index": 257, "timestamp": "2017-02-19T23:49:31Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53f7621a-583b-469a-a7a4-3d7617f48d67", "eventTime": "2017-02-19T23:49:31Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "561a97ff-91cd-4f88-bb33-edfff0db1476", "record_id": "flaws_cloudtrail:0000258:561a97ff-91cd-4f88-bb33-edfff0db1476", "row_index": 258, "timestamp": "2017-02-19T23:49:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "561a97ff-91cd-4f88-bb33-edfff0db1476", "eventTime": "2017-02-19T23:49:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c73c6ab8-1e4d-4c2c-8630-a32c638298bb", "record_id": "flaws_cloudtrail:0000259:c73c6ab8-1e4d-4c2c-8630-a32c638298bb", "row_index": 259, "timestamp": "2017-02-19T23:49:31Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c73c6ab8-1e4d-4c2c-8630-a32c638298bb", "eventTime": "2017-02-19T23:49:31Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ba639e3-51c3-4536-a061-14208f6ce333", "record_id": "flaws_cloudtrail:0000260:0ba639e3-51c3-4536-a061-14208f6ce333", "row_index": 260, "timestamp": "2017-02-19T23:49:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ba639e3-51c3-4536-a061-14208f6ce333", "eventTime": "2017-02-19T23:49:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pageSize": 300}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "858212d72-b947-4038-ae00-0a075b750414", "record_id": "flaws_cloudtrail:0000261:858212d72-b947-4038-ae00-0a075b750414", "row_index": 261, "timestamp": "2017-02-19T23:49:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA23ULLH52YC6RZGR0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "858212d72-b947-4038-ae00-0a075b750414", "eventTime": "2017-02-19T23:49:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA23ULLH52YC6RZGR0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pageSize": 300}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fe357ce-d6f9-490a-a2c4-74688ac70d2c", "record_id": "flaws_cloudtrail:0000262:2fe357ce-d6f9-490a-a2c4-74688ac70d2c", "row_index": 262, "timestamp": "2017-02-19T23:51:27Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fe357ce-d6f9-490a-a2c4-74688ac70d2c", "eventTime": "2017-02-19T23:51:27Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dbfd62a-f035-4313-9746-c7a6be44e570", "record_id": "flaws_cloudtrail:0000263:1dbfd62a-f035-4313-9746-c7a6be44e570", "row_index": 263, "timestamp": "2017-02-19T23:51:27Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dbfd62a-f035-4313-9746-c7a6be44e570", "eventTime": "2017-02-19T23:51:27Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "740995e72-0164-4acf-8f97-5f706658e70", "record_id": "flaws_cloudtrail:0000264:740995e72-0164-4acf-8f97-5f706658e70", "row_index": 264, "timestamp": "2017-02-19T23:51:27Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "740995e72-0164-4acf-8f97-5f706658e70", "eventTime": "2017-02-19T23:51:27Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3394c007-7e19-49c5-b8c7-93e403c77c4e", "record_id": "flaws_cloudtrail:0000265:3394c007-7e19-49c5-b8c7-93e403c77c4e", "row_index": 265, "timestamp": "2017-02-19T23:51:27Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3394c007-7e19-49c5-b8c7-93e403c77c4e", "eventTime": "2017-02-19T23:51:27Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6dd38e6-89c1-4337-818e-c87c21b29600", "record_id": "flaws_cloudtrail:0000266:f6dd38e6-89c1-4337-818e-c87c21b29600", "row_index": 266, "timestamp": "2017-02-19T23:51:27Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6dd38e6-89c1-4337-818e-c87c21b29600", "eventTime": "2017-02-19T23:51:27Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dcdddb3-76ed-4d85-86c3-367cbc10d9c3", "record_id": "flaws_cloudtrail:0000267:2dcdddb3-76ed-4d85-86c3-367cbc10d9c3", "row_index": 267, "timestamp": "2017-02-19T23:51:28Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dcdddb3-76ed-4d85-86c3-367cbc10d9c3", "eventTime": "2017-02-19T23:51:28Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f412c02-a606-4f5a-afde-82eb8a918f31", "record_id": "flaws_cloudtrail:0000268:3f412c02-a606-4f5a-afde-82eb8a918f31", "row_index": 268, "timestamp": "2017-02-19T23:51:29Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f412c02-a606-4f5a-afde-82eb8a918f31", "eventTime": "2017-02-19T23:51:29Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ae8c234-1d06-49a5-92ac-3669cf0ab14e", "record_id": "flaws_cloudtrail:0000269:1ae8c234-1d06-49a5-92ac-3669cf0ab14e", "row_index": 269, "timestamp": "2017-02-19T23:52:29Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ae8c234-1d06-49a5-92ac-3669cf0ab14e", "eventTime": "2017-02-19T23:52:29Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86a1a957-67fe-40e1-8f50-18b9cfde15fa", "record_id": "flaws_cloudtrail:0000270:86a1a957-67fe-40e1-8f50-18b9cfde15fa", "row_index": 270, "timestamp": "2017-02-19T23:52:29Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86a1a957-67fe-40e1-8f50-18b9cfde15fa", "eventTime": "2017-02-19T23:52:29Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "394e61db-b077-4679-af3a-5eda8cb38fb8", "record_id": "flaws_cloudtrail:0000271:394e61db-b077-4679-af3a-5eda8cb38fb8", "row_index": 271, "timestamp": "2017-02-19T23:52:29Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "394e61db-b077-4679-af3a-5eda8cb38fb8", "eventTime": "2017-02-19T23:52:29Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "022c4247-48df-41be-aad7-1c82431f60", "record_id": "flaws_cloudtrail:0000272:022c4247-48df-41be-aad7-1c82431f60", "row_index": 272, "timestamp": "2017-02-19T23:52:29Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "022c4247-48df-41be-aad7-1c82431f60", "eventTime": "2017-02-19T23:52:29Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c415f8e-0055-4231-9fed-5c0d02242973", "record_id": "flaws_cloudtrail:0000273:0c415f8e-0055-4231-9fed-5c0d02242973", "row_index": 273, "timestamp": "2017-02-19T23:52:29Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c415f8e-0055-4231-9fed-5c0d02242973", "eventTime": "2017-02-19T23:52:29Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61317dd-34cd-4935-bae8-e9bfcba0d305", "record_id": "flaws_cloudtrail:0000274:61317dd-34cd-4935-bae8-e9bfcba0d305", "row_index": 274, "timestamp": "2017-02-19T23:52:30Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61317dd-34cd-4935-bae8-e9bfcba0d305", "eventTime": "2017-02-19T23:52:30Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/PowerUserAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5423ce89-9846-4187-af7a-ebb52ff2f795", "record_id": "flaws_cloudtrail:0000275:5423ce89-9846-4187-af7a-ebb52ff2f795", "row_index": 275, "timestamp": "2017-02-19T23:52:30Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5423ce89-9846-4187-af7a-ebb52ff2f795", "eventTime": "2017-02-19T23:52:30Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/PowerUserAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "787deb6c-470b-4c3f-91c7-48fe9a9de064", "record_id": "flaws_cloudtrail:0000276:787deb6c-470b-4c3f-91c7-48fe9a9de064", "row_index": 276, "timestamp": "2017-02-19T23:52:30Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "787deb6c-470b-4c3f-91c7-48fe9a9de064", "eventTime": "2017-02-19T23:52:30Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/PowerUserAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c290d827-2bdd-41ee-bf62-881888a8697", "record_id": "flaws_cloudtrail:0000277:c290d827-2bdd-41ee-bf62-881888a8697", "row_index": 277, "timestamp": "2017-02-19T23:52:30Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c290d827-2bdd-41ee-bf62-881888a8697", "eventTime": "2017-02-19T23:52:30Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/PowerUserAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68236dd0-5431-4285-93cb-645324857d78", "record_id": "flaws_cloudtrail:0000278:68236dd0-5431-4285-93cb-645324857d78", "row_index": 278, "timestamp": "2017-02-19T23:52:30Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68236dd0-5431-4285-93cb-645324857d78", "eventTime": "2017-02-19T23:52:30Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb478cc6-9d7a-4ad3-92a2-15af9f5e1aec", "record_id": "flaws_cloudtrail:0000279:bb478cc6-9d7a-4ad3-92a2-15af9f5e1aec", "row_index": 279, "timestamp": "2017-02-19T23:52:30Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb478cc6-9d7a-4ad3-92a2-15af9f5e1aec", "eventTime": "2017-02-19T23:52:30Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/PowerUserAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8da950b1-6fe4-44ee-ac2a-898a05f434f0", "record_id": "flaws_cloudtrail:0000280:8da950b1-6fe4-44ee-ac2a-898a05f434f0", "row_index": 280, "timestamp": "2017-02-19T23:52:30Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8da950b1-6fe4-44ee-ac2a-898a05f434f0", "eventTime": "2017-02-19T23:52:30Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74846ae9-bb61-471d-8fa2-cbce5bf5a32c", "record_id": "flaws_cloudtrail:0000281:74846ae9-bb61-471d-8fa2-cbce5bf5a32c", "row_index": 281, "timestamp": "2017-02-19T23:52:30Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74846ae9-bb61-471d-8fa2-cbce5bf5a32c", "eventTime": "2017-02-19T23:52:30Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/PowerUserAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03a6f814-31fd-456c-b970-5f6ff3ec6088", "record_id": "flaws_cloudtrail:0000282:03a6f814-31fd-456c-b970-5f6ff3ec6088", "row_index": 282, "timestamp": "2017-02-19T23:54:09Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03a6f814-31fd-456c-b970-5f6ff3ec6088", "eventTime": "2017-02-19T23:54:09Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec9852e6-269d-49cc-8d44-6c7d5baa1c6f", "record_id": "flaws_cloudtrail:0000283:ec9852e6-269d-49cc-8d44-6c7d5baa1c6f", "row_index": 283, "timestamp": "2017-02-19T23:54:09Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec9852e6-269d-49cc-8d44-6c7d5baa1c6f", "eventTime": "2017-02-19T23:54:09Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10c231a8-61ff-4f79-ad3f-0f80d0a288dc", "record_id": "flaws_cloudtrail:0000284:10c231a8-61ff-4f79-ad3f-0f80d0a288dc", "row_index": 284, "timestamp": "2017-02-19T23:54:09Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10c231a8-61ff-4f79-ad3f-0f80d0a288dc", "eventTime": "2017-02-19T23:54:09Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baca8bd3-c441-4572-b088-d1b4b7628b5d", "record_id": "flaws_cloudtrail:0000285:baca8bd3-c441-4572-b088-d1b4b7628b5d", "row_index": 285, "timestamp": "2017-02-19T23:54:09Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baca8bd3-c441-4572-b088-d1b4b7628b5d", "eventTime": "2017-02-19T23:54:09Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5c57997-b39d-4fe7-8ecd-7977122e9c62", "record_id": "flaws_cloudtrail:0000286:c5c57997-b39d-4fe7-8ecd-7977122e9c62", "row_index": 286, "timestamp": "2017-02-19T23:54:09Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5c57997-b39d-4fe7-8ecd-7977122e9c62", "eventTime": "2017-02-19T23:54:09Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ab3c8c9-0e27-46a9-8da6-cf7f67e885018", "record_id": "flaws_cloudtrail:0000287:2ab3c8c9-0e27-46a9-8da6-cf7f67e885018", "row_index": 287, "timestamp": "2017-02-19T23:54:10Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ab3c8c9-0e27-46a9-8da6-cf7f67e885018", "eventTime": "2017-02-19T23:54:10Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1471bb3-1bd2-4b4b-8adb-68f9863cacf5", "record_id": "flaws_cloudtrail:0000288:c1471bb3-1bd2-4b4b-8adb-68f9863cacf5", "row_index": 288, "timestamp": "2017-02-19T23:54:10Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1471bb3-1bd2-4b4b-8adb-68f9863cacf5", "eventTime": "2017-02-19T23:54:10Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-b6ab3a24-1aa4-4855-94d4-40cdef59ec5b"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d668714-4da0-42f4-9815-5df5457cf9b1", "record_id": "flaws_cloudtrail:0000289:d668714-4da0-42f4-9815-5df5457cf9b1", "row_index": 289, "timestamp": "2017-02-19T23:54:10Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d668714-4da0-42f4-9815-5df5457cf9b1", "eventTime": "2017-02-19T23:54:10Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-b6ab3a24-1aa4-4855-94d4-40cdef59ec5b", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c048bc02-228d-4d56-b0c1-95b645dfe666", "record_id": "flaws_cloudtrail:0000290:c048bc02-228d-4d56-b0c1-95b645dfe666", "row_index": 290, "timestamp": "2017-02-19T23:54:10Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c048bc02-228d-4d56-b0c1-95b645dfe666", "eventTime": "2017-02-19T23:54:10Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9c3351e-1e33-4099-86cb-408e4e744dc2", "record_id": "flaws_cloudtrail:0000291:f9c3351e-1e33-4099-86cb-408e4e744dc2", "row_index": 291, "timestamp": "2017-02-19T23:54:10Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9c3351e-1e33-4099-86cb-408e4e744dc2", "eventTime": "2017-02-19T23:54:10Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-b6ab3a24-1aa4-4855-94d4-40cdef59ec5b"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d49ea36-497e-43c0-b366-884f8147c88b", "record_id": "flaws_cloudtrail:0000292:0d49ea36-497e-43c0-b366-884f8147c88b", "row_index": 292, "timestamp": "2017-02-19T23:54:10Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d49ea36-497e-43c0-b366-884f8147c88b", "eventTime": "2017-02-19T23:54:10Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-b6ab3a24-1aa4-4855-94d4-40cdef59ec5b"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7937e5e3-eda9-4a92-a61b-e2f85038e4e2", "record_id": "flaws_cloudtrail:0000293:7937e5e3-eda9-4a92-a61b-e2f85038e4e2", "row_index": 293, "timestamp": "2017-02-19T23:54:11Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7937e5e3-eda9-4a92-a61b-e2f85038e4e2", "eventTime": "2017-02-19T23:54:11Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-b6ab3a24-1aa4-4855-94d4-40cdef59ec5b", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ea2a19e-d80b-4c9e-a199-8b31123ea2cf", "record_id": "flaws_cloudtrail:0000294:1ea2a19e-d80b-4c9e-a199-8b31123ea2cf", "row_index": 294, "timestamp": "2017-02-19T23:54:11Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ea2a19e-d80b-4c9e-a199-8b31123ea2cf", "eventTime": "2017-02-19T23:54:11Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-b6ab3a24-1aa4-4855-94d4-40cdef59ec5b"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c8d95aa-438d-4d70-aa76-d5c6b873f35b", "record_id": "flaws_cloudtrail:0000295:0c8d95aa-438d-4d70-aa76-d5c6b873f35b", "row_index": 295, "timestamp": "2017-02-19T23:54:17Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c8d95aa-438d-4d70-aa76-d5c6b873f35b", "eventTime": "2017-02-19T23:54:17Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-4e23caa8-1f82-45b5-9068-3200fb1a0c7a", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3694edd-a5e6-427d-be6c-1a0e896619ad", "record_id": "flaws_cloudtrail:0000296:d3694edd-a5e6-427d-be6c-1a0e896619ad", "row_index": 296, "timestamp": "2017-02-19T23:54:17Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3694edd-a5e6-427d-be6c-1a0e896619ad", "eventTime": "2017-02-19T23:54:17Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-4e23caa8-1f82-45b5-9068-3200fb1a0c7a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03b594231-6dce-48c6-9641-574bd426c224", "record_id": "flaws_cloudtrail:0000297:03b594231-6dce-48c6-9641-574bd426c224", "row_index": 297, "timestamp": "2017-02-19T23:54:17Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03b594231-6dce-48c6-9641-574bd426c224", "eventTime": "2017-02-19T23:54:17Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-4e23caa8-1f82-45b5-9068-3200fb1a0c7a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c0ac2b0-c85e-44c0-8ae2-2e3724d86e5d", "record_id": "flaws_cloudtrail:0000298:4c0ac2b0-c85e-44c0-8ae2-2e3724d86e5d", "row_index": 298, "timestamp": "2017-02-19T23:54:35Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c0ac2b0-c85e-44c0-8ae2-2e3724d86e5d", "eventTime": "2017-02-19T23:54:35Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ee35022-cf0c-4c2b-9f0d-c02223aa2771", "record_id": "flaws_cloudtrail:0000299:9ee35022-cf0c-4c2b-9f0d-c02223aa2771", "row_index": 299, "timestamp": "2017-02-19T23:54:59Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ee35022-cf0c-4c2b-9f0d-c02223aa2771", "eventTime": "2017-02-19T23:54:59Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonAPIGatewayAdministrator"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a86c924-6754-4d3f-83c4-b04bc5bc7a37", "record_id": "flaws_cloudtrail:0000300:1a86c924-6754-4d3f-83c4-b04bc5bc7a37", "row_index": 300, "timestamp": "2017-02-19T23:54:59Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a86c924-6754-4d3f-83c4-b04bc5bc7a37", "eventTime": "2017-02-19T23:54:59Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonAPIGatewayAdministrator", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbc6bbed-cd33-45d7-beae-d524562ad7ee", "record_id": "flaws_cloudtrail:0000301:bbc6bbed-cd33-45d7-beae-d524562ad7ee", "row_index": 301, "timestamp": "2017-02-19T23:54:59Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbc6bbed-cd33-45d7-beae-d524562ad7ee", "eventTime": "2017-02-19T23:54:59Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonAPIGatewayAdministrator"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff35dfb7-14c5-4339-8814-81b4e30ec312", "record_id": "flaws_cloudtrail:0000302:ff35dfb7-14c5-4339-8814-81b4e30ec312", "row_index": 302, "timestamp": "2017-02-19T23:55:59Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff35dfb7-14c5-4339-8814-81b4e30ec312", "eventTime": "2017-02-19T23:55:59Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e958ac8-35f4-4076-8f1b-757736b8d8e1", "record_id": "flaws_cloudtrail:0000303:5e958ac8-35f4-4076-8f1b-757736b8d8e1", "row_index": 303, "timestamp": "2017-02-19T23:55:59Z", "event_type": "GetAccount", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e958ac8-35f4-4076-8f1b-757736b8d8e1", "eventTime": "2017-02-19T23:55:59Z", "eventName": "GetAccount", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef8e3faf-e15d-48eb-968a-56f80b69c9d0", "record_id": "flaws_cloudtrail:0000304:ef8e3faf-e15d-48eb-968a-56f80b69c9d0", "row_index": 304, "timestamp": "2017-02-19T23:56:00Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef8e3faf-e15d-48eb-968a-56f80b69c9d0", "eventTime": "2017-02-19T23:56:00Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11cf80ff-4854-4e5b-8717-02820bd14259", "record_id": "flaws_cloudtrail:0000305:11cf80ff-4854-4e5b-8717-02820bd14259", "row_index": 305, "timestamp": "2017-02-19T23:56:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIAIO9RSDA4YZ3WY079", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.121.125.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/data-reader-35"], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11cf80ff-4854-4e5b-8717-02820bd14259", "eventTime": "2017-02-19T23:56:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.121.125.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAIO9RSDA4YZ3WY079", "userName": "Level5"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/data-reader-35", "roleSessionName": "reader-3479"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/data-reader-35"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adcee0b5-50c1-4f88-8ad3-6316f218b743", "record_id": "flaws_cloudtrail:0000306:adcee0b5-50c1-4f88-8ad3-6316f218b743", "row_index": 306, "timestamp": "2017-02-19T23:56:17Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adcee0b5-50c1-4f88-8ad3-6316f218b743", "eventTime": "2017-02-19T23:56:17Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonAPIGatewayInvokeFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a582614-27b6-4b3c-ba02-7272cf0069d5", "record_id": "flaws_cloudtrail:0000307:5a582614-27b6-4b3c-ba02-7272cf0069d5", "row_index": 307, "timestamp": "2017-02-19T23:56:17Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a582614-27b6-4b3c-ba02-7272cf0069d5", "eventTime": "2017-02-19T23:56:17Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonAPIGatewayInvokeFullAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2b44fdc-a248-4044-820a-94163f1f75a9", "record_id": "flaws_cloudtrail:0000308:f2b44fdc-a248-4044-820a-94163f1f75a9", "row_index": 308, "timestamp": "2017-02-19T23:56:17Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2b44fdc-a248-4044-820a-94163f1f75a9", "eventTime": "2017-02-19T23:56:17Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonAPIGatewayInvokeFullAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ea68c78-50a9-466c-9d39-c90a66e26842", "record_id": "flaws_cloudtrail:0000309:2ea68c78-50a9-466c-9d39-c90a66e26842", "row_index": 309, "timestamp": "2017-02-19T23:57:29Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIAIO9RSDA4YZ3WY079", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.121.125.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 508, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ea68c78-50a9-466c-9d39-c90a66e26842", "eventTime": "2017-02-19T23:57:29Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.121.125.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAIO9RSDA4YZ3WY079", "userName": "Level5"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46f3917e-387a-475c-8433-99cb3ca5ecc7", "record_id": "flaws_cloudtrail:0000310:46f3917e-387a-475c-8433-99cb3ca5ecc7", "row_index": 310, "timestamp": "2017-02-19T23:58:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIAIO9RSDA4YZ3WY079", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.121.125.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7612"], "raw_record_size_bytes": 613, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46f3917e-387a-475c-8433-99cb3ca5ecc7", "eventTime": "2017-02-19T23:58:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.121.125.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAIO9RSDA4YZ3WY079", "userName": "Level5"}, "requestParameters": {"bucketName": "prod-data-7612"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7612"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be10adfe-fc83-4ef2-8a52-065508cb309", "record_id": "flaws_cloudtrail:0000311:be10adfe-fc83-4ef2-8a52-065508cb309", "row_index": 311, "timestamp": "2017-02-19T23:59:08Z", "event_type": "GetApiKeys", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "AKIAKZ5DMM2L61KYGILK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be10adfe-fc83-4ef2-8a52-065508cb309", "eventTime": "2017-02-19T23:59:08Z", "eventName": "GetApiKeys", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "AKIAKZ5DMM2L61KYGILK"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c2ecb4b-c169-4f87-a17a-8624ad76afe2", "record_id": "flaws_cloudtrail:0000312:8c2ecb4b-c169-4f87-a17a-8624ad76afe2", "row_index": 312, "timestamp": "2017-02-19T23:59:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIAIO9RSDA4YZ3WY079", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.121.125.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7612-archive"], "raw_record_size_bytes": 629, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c2ecb4b-c169-4f87-a17a-8624ad76afe2", "eventTime": "2017-02-19T23:59:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.121.125.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAIO9RSDA4YZ3WY079", "userName": "Level5"}, "requestParameters": {"bucketName": "prod-data-7612-archive"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7612-archive"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa4ceae7-1477-427e-9eb0-59a25613da66", "record_id": "flaws_cloudtrail:0000313:aa4ceae7-1477-427e-9eb0-59a25613da66", "row_index": 313, "timestamp": "2017-02-19T23:59:49Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "AKIAKZ5DMM2L61KYGILK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa4ceae7-1477-427e-9eb0-59a25613da66", "eventTime": "2017-02-19T23:59:49Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid REST API identifier specified", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "AKIAKZ5DMM2L61KYGILK"}, "requestParameters": {"restApiId": "h0fh6siai6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82b560c3-de62-4a3b-a630-423314f3a745", "record_id": "flaws_cloudtrail:0000314:82b560c3-de62-4a3b-a630-423314f3a745", "row_index": 314, "timestamp": "2017-02-20T00:00:42Z", "event_type": "ListObjects", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIAIO9RSDA4YZ3WY079", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.121.125.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7612"], "raw_record_size_bytes": 633, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82b560c3-de62-4a3b-a630-423314f3a745", "eventTime": "2017-02-20T00:00:42Z", "eventName": "ListObjects", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.121.125.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAIO9RSDA4YZ3WY079", "userName": "Level5"}, "requestParameters": {"bucketName": "prod-data-7612", "prefix": "customer/"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7612"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3a598b5-a60e-42f7-95e4-bd6b23e83d2f", "record_id": "flaws_cloudtrail:0000315:e3a598b5-a60e-42f7-95e4-bd6b23e83d2f", "row_index": 315, "timestamp": "2017-02-20T00:01:37Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "AKIAKZ5DMM2L61KYGILK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3a598b5-a60e-42f7-95e4-bd6b23e83d2f", "eventTime": "2017-02-20T00:01:37Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "AKIAKZ5DMM2L61KYGILK"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32ddcb05-9ac8-4951-be6c-c93582b21e87", "record_id": "flaws_cloudtrail:0000316:32ddcb05-9ac8-4951-be6c-c93582b21e87", "row_index": 316, "timestamp": "2017-02-20T00:01:47Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "AKIAKZ5DMM2L61KYGILK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32ddcb05-9ac8-4951-be6c-c93582b21e87", "eventTime": "2017-02-20T00:01:47Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "AKIAKZ5DMM2L61KYGILK"}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05529041-1a58-4288-9b4a-abe44a30ad67", "record_id": "flaws_cloudtrail:0000317:05529041-1a58-4288-9b4a-abe44a30ad67", "row_index": 317, "timestamp": "2017-02-20T00:03:07Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIAIO9RSDA4YZ3WY079", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.121.125.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7612"], "raw_record_size_bytes": 638, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05529041-1a58-4288-9b4a-abe44a30ad67", "eventTime": "2017-02-20T00:03:07Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.121.125.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAIO9RSDA4YZ3WY079", "userName": "Level5"}, "requestParameters": {"bucketName": "prod-data-7612", "key": "customer/00353.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7612"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "deda7c6f-19cf-4895-87b0-37651b0fd3ab", "record_id": "flaws_cloudtrail:0000318:deda7c6f-19cf-4895-87b0-37651b0fd3ab", "row_index": 318, "timestamp": "2017-02-20T00:03:45Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIAIO9RSDA4YZ3WY079", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.121.125.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7612"], "raw_record_size_bytes": 638, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "deda7c6f-19cf-4895-87b0-37651b0fd3ab", "eventTime": "2017-02-20T00:03:45Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.121.125.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAIO9RSDA4YZ3WY079", "userName": "Level5"}, "requestParameters": {"bucketName": "prod-data-7612", "key": "customer/08008.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7612"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee043ff0-990e-4fea-be88-27a072339e71", "record_id": "flaws_cloudtrail:0000319:ee043ff0-990e-4fea-be88-27a072339e71", "row_index": 319, "timestamp": "2017-02-20T00:04:08Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIAIO9RSDA4YZ3WY079", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.121.125.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7612"], "raw_record_size_bytes": 638, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee043ff0-990e-4fea-be88-27a072339e71", "eventTime": "2017-02-20T00:04:08Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.121.125.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAIO9RSDA4YZ3WY079", "userName": "Level5"}, "requestParameters": {"bucketName": "prod-data-7612", "key": "customer/07548.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7612"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d852edcc-186a-4dd1-9a57-0df6a37514b2", "record_id": "flaws_cloudtrail:0000320:d852edcc-186a-4dd1-9a57-0df6a37514b2", "row_index": 320, "timestamp": "2017-02-20T00:04:46Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIAIO9RSDA4YZ3WY079", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.121.125.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7612"], "raw_record_size_bytes": 638, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d852edcc-186a-4dd1-9a57-0df6a37514b2", "eventTime": "2017-02-20T00:04:46Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.121.125.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAIO9RSDA4YZ3WY079", "userName": "Level5"}, "requestParameters": {"bucketName": "prod-data-7612", "key": "customer/02461.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7612"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38aec834-cc83-418a-a420-6a9a738be45b", "record_id": "flaws_cloudtrail:0000321:38aec834-cc83-418a-a420-6a9a738be45b", "row_index": 321, "timestamp": "2017-02-20T00:05:29Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIAIO9RSDA4YZ3WY079", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "218.121.125.176", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7612"], "raw_record_size_bytes": 638, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38aec834-cc83-418a-a420-6a9a738be45b", "eventTime": "2017-02-20T00:05:29Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "218.121.125.176", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAIO9RSDA4YZ3WY079", "userName": "Level5"}, "requestParameters": {"bucketName": "prod-data-7612", "key": "customer/03546.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7612"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a47fbde1-0b4b-4ddc-a5cb-d34e7249b454", "record_id": "flaws_cloudtrail:0000322:a47fbde1-0b4b-4ddc-a5cb-d34e7249b454", "row_index": 322, "timestamp": "2017-02-20T00:15:49Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a47fbde1-0b4b-4ddc-a5cb-d34e7249b454", "eventTime": "2017-02-20T00:15:49Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d71e2a3f-dbf6-4d5b-976b-72ac44e57ab0", "record_id": "flaws_cloudtrail:0000323:d71e2a3f-dbf6-4d5b-976b-72ac44e57ab0", "row_index": 323, "timestamp": "2017-02-20T00:15:49Z", "event_type": "GetAuthorizers", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d71e2a3f-dbf6-4d5b-976b-72ac44e57ab0", "eventTime": "2017-02-20T00:15:49Z", "eventName": "GetAuthorizers", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13566a-8a80-4ce1-9f7c-b31ad0b850f1", "record_id": "flaws_cloudtrail:0000324:13566a-8a80-4ce1-9f7c-b31ad0b850f1", "row_index": 324, "timestamp": "2017-02-20T00:15:50Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13566a-8a80-4ce1-9f7c-b31ad0b850f1", "eventTime": "2017-02-20T00:15:50Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "embed": ["methods"], "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f662eb8-50c4-4318-8b11-b5519ec5686d", "record_id": "flaws_cloudtrail:0000325:0f662eb8-50c4-4318-8b11-b5519ec5686d", "row_index": 325, "timestamp": "2017-02-20T00:15:50Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f662eb8-50c4-4318-8b11-b5519ec5686d", "eventTime": "2017-02-20T00:15:50Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ca76d2a-9151-4626-b211-657e32ffde83", "record_id": "flaws_cloudtrail:0000326:2ca76d2a-9151-4626-b211-657e32ffde83", "row_index": 326, "timestamp": "2017-02-20T00:15:50Z", "event_type": "GetUsagePlans", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ca76d2a-9151-4626-b211-657e32ffde83", "eventTime": "2017-02-20T00:15:50Z", "eventName": "GetUsagePlans", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8c533d7-278c-4d86-aa51-e098c4c3528e", "record_id": "flaws_cloudtrail:0000327:d8c533d7-278c-4d86-aa51-e098c4c3528e", "row_index": 327, "timestamp": "2017-02-20T00:15:50Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8c533d7-278c-4d86-aa51-e098c4c3528e", "eventTime": "2017-02-20T00:15:50Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "314c9590-d9b0-44a1-842a-53fd8079c731", "record_id": "flaws_cloudtrail:0000328:314c9590-d9b0-44a1-842a-53fd8079c731", "row_index": 328, "timestamp": "2017-02-20T00:15:50Z", "event_type": "GetDocumentationParts", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "314c9590-d9b0-44a1-842a-53fd8079c731", "eventTime": "2017-02-20T00:15:50Z", "eventName": "GetDocumentationParts", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5592b092-cee1-4f26-a5b8-6e8c38152d1c", "record_id": "flaws_cloudtrail:0000329:5592b092-cee1-4f26-a5b8-6e8c38152d1c", "row_index": 329, "timestamp": "2017-02-20T00:15:51Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5592b092-cee1-4f26-a5b8-6e8c38152d1c", "eventTime": "2017-02-20T00:15:51Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13fe94f5-2eaa-46b5-8fc7-4aeb968d20b3", "record_id": "flaws_cloudtrail:0000330:13fe94f5-2eaa-46b5-8fc7-4aeb968d20b3", "row_index": 330, "timestamp": "2017-02-20T00:15:51Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13fe94f5-2eaa-46b5-8fc7-4aeb968d20b3", "eventTime": "2017-02-20T00:15:51Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "740609d4d-5fec-4998-8db1-01376cccc7", "record_id": "flaws_cloudtrail:0000331:740609d4d-5fec-4998-8db1-01376cccc7", "row_index": 331, "timestamp": "2017-02-20T00:15:53Z", "event_type": "GetDeployment", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "740609d4d-5fec-4998-8db1-01376cccc7", "eventTime": "2017-02-20T00:15:53Z", "eventName": "GetDeployment", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"deploymentId": "f1ibpo", "restApiId": "puspzvwgb6", "embed": ["apisummary"], "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13ba9c54-ba46-4432-b4a9-892296b57de5", "record_id": "flaws_cloudtrail:0000332:13ba9c54-ba46-4432-b4a9-892296b57de5", "row_index": 332, "timestamp": "2017-02-20T00:15:57Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13ba9c54-ba46-4432-b4a9-892296b57de5", "eventTime": "2017-02-20T00:15:57Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12fe7aac-adbb-4a56-977e-bbe06bffc091", "record_id": "flaws_cloudtrail:0000333:12fe7aac-adbb-4a56-977e-bbe06bffc091", "row_index": 333, "timestamp": "2017-02-20T00:15:57Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12fe7aac-adbb-4a56-977e-bbe06bffc091", "eventTime": "2017-02-20T00:15:57Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "embed": ["methods"], "limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "998615c3-6dae-40dd-9d96-3112ceb5a52c", "record_id": "flaws_cloudtrail:0000334:998615c3-6dae-40dd-9d96-3112ceb5a52c", "row_index": 334, "timestamp": "2017-02-20T00:15:57Z", "event_type": "GetUsagePlans", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "998615c3-6dae-40dd-9d96-3112ceb5a52c", "eventTime": "2017-02-20T00:15:57Z", "eventName": "GetUsagePlans", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 1000, "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "145a2954-652a-42ec-bdce-b50f18058b72", "record_id": "flaws_cloudtrail:0000335:145a2954-652a-42ec-bdce-b50f18058b72", "row_index": 335, "timestamp": "2017-02-20T00:15:58Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJGMT0U1DL7V6R08E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "145a2954-652a-42ec-bdce-b50f18058b72", "eventTime": "2017-02-20T00:15:58Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Apache-HttpClient/4.5.x (Java/1.8.0_102)", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJGMT0U1DL7V6R08E", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0daf7232-0940-4ed9-9885-1f0490eac206", "record_id": "flaws_cloudtrail:0000336:0daf7232-0940-4ed9-9885-1f0490eac206", "row_index": 336, "timestamp": "2017-02-20T00:19:41Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0daf7232-0940-4ed9-9885-1f0490eac206", "eventTime": "2017-02-20T00:19:41Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSLambdaExecute"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6edcc6a8-1e7d-4188-a030-be78abf7003a", "record_id": "flaws_cloudtrail:0000337:6edcc6a8-1e7d-4188-a030-be78abf7003a", "row_index": 337, "timestamp": "2017-02-20T00:19:42Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6edcc6a8-1e7d-4188-a030-be78abf7003a", "eventTime": "2017-02-20T00:19:42Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSLambdaExecute", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6156d3f-fc30-4d4e-a7ea-e198ff705b6c", "record_id": "flaws_cloudtrail:0000338:b6156d3f-fc30-4d4e-a7ea-e198ff705b6c", "row_index": 338, "timestamp": "2017-02-20T00:19:42Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6156d3f-fc30-4d4e-a7ea-e198ff705b6c", "eventTime": "2017-02-20T00:19:42Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSLambdaExecute"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db4c83e8-b368-4057-b9ef-77cfa4069dd3", "record_id": "flaws_cloudtrail:0000339:db4c83e8-b368-4057-b9ef-77cfa4069dd3", "row_index": 339, "timestamp": "2017-02-20T00:20:24Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db4c83e8-b368-4057-b9ef-77cfa4069dd3", "eventTime": "2017-02-20T00:20:24Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bfb88f7-7298-486c-b14d-a71be0b4ec76", "record_id": "flaws_cloudtrail:0000340:7bfb88f7-7298-486c-b14d-a71be0b4ec76", "row_index": 340, "timestamp": "2017-02-20T00:20:25Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bfb88f7-7298-486c-b14d-a71be0b4ec76", "eventTime": "2017-02-20T00:20:25Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66e971b6-c901-4c28-9be7-66ab5c3f6246", "record_id": "flaws_cloudtrail:0000341:66e971b6-c901-4c28-9be7-66ab5c3f6246", "row_index": 341, "timestamp": "2017-02-20T00:20:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66e971b6-c901-4c28-9be7-66ab5c3f6246", "eventTime": "2017-02-20T00:20:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66345a5b-bfef-46fe-8beb-01ab62f0503d", "record_id": "flaws_cloudtrail:0000342:66345a5b-bfef-46fe-8beb-01ab62f0503d", "row_index": 342, "timestamp": "2017-02-20T00:20:27Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66345a5b-bfef-46fe-8beb-01ab62f0503d", "eventTime": "2017-02-20T00:20:27Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "575b839d-f790-42e3-9f3e-6cbfb986bf06", "record_id": "flaws_cloudtrail:0000343:575b839d-f790-42e3-9f3e-6cbfb986bf06", "row_index": 343, "timestamp": "2017-02-20T00:20:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "575b839d-f790-42e3-9f3e-6cbfb986bf06", "eventTime": "2017-02-20T00:20:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d0c9422-bcf4-46d7-b846-25f3af664378a", "record_id": "flaws_cloudtrail:0000344:5d0c9422-bcf4-46d7-b846-25f3af664378a", "row_index": 344, "timestamp": "2017-02-20T00:20:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d0c9422-bcf4-46d7-b846-25f3af664378a", "eventTime": "2017-02-20T00:20:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v9"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e573d3a-2701-4900-955e-7f5bd70b8d39", "record_id": "flaws_cloudtrail:0000345:7e573d3a-2701-4900-955e-7f5bd70b8d39", "row_index": 345, "timestamp": "2017-02-20T00:20:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e573d3a-2701-4900-955e-7f5bd70b8d39", "eventTime": "2017-02-20T00:20:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v8"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9702be8-2a62-4d4e-afa3-368aafaec18a", "record_id": "flaws_cloudtrail:0000346:a9702be8-2a62-4d4e-afa3-368aafaec18a", "row_index": 346, "timestamp": "2017-02-20T00:20:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9702be8-2a62-4d4e-afa3-368aafaec18a", "eventTime": "2017-02-20T00:20:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c193759b3-46c1-4fb6-b06c-cb4c9306b2f6", "record_id": "flaws_cloudtrail:0000347:c193759b3-46c1-4fb6-b06c-cb4c9306b2f6", "row_index": 347, "timestamp": "2017-02-20T00:20:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c193759b3-46c1-4fb6-b06c-cb4c9306b2f6", "eventTime": "2017-02-20T00:20:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51bbd94a-76ab-482b-8352-c84d62e03747", "record_id": "flaws_cloudtrail:0000348:51bbd94a-76ab-482b-8352-c84d62e03747", "row_index": 348, "timestamp": "2017-02-20T00:20:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51bbd94a-76ab-482b-8352-c84d62e03747", "eventTime": "2017-02-20T00:20:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v7"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8198eedc-1c44-46ad-87ed-a901f5f06843", "record_id": "flaws_cloudtrail:0000349:8198eedc-1c44-46ad-87ed-a901f5f06843", "row_index": 349, "timestamp": "2017-02-20T00:20:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8198eedc-1c44-46ad-87ed-a901f5f06843", "eventTime": "2017-02-20T00:20:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a971bf6-f224-45ab-9724-2558ca9f1e5a", "record_id": "flaws_cloudtrail:0000350:8a971bf6-f224-45ab-9724-2558ca9f1e5a", "row_index": 350, "timestamp": "2017-02-20T00:20:27Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a971bf6-f224-45ab-9724-2558ca9f1e5a", "eventTime": "2017-02-20T00:20:27Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8e42baf-9d38-4f7f-a7e9-0a26455", "record_id": "flaws_cloudtrail:0000351:e8e42baf-9d38-4f7f-a7e9-0a26455", "row_index": 351, "timestamp": "2017-02-20T00:20:27Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8e42baf-9d38-4f7f-a7e9-0a26455", "eventTime": "2017-02-20T00:20:27Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41b285e5-d61c-4f4c-b86c-11e6f4ddc785", "record_id": "flaws_cloudtrail:0000352:41b285e5-d61c-4f4c-b86c-11e6f4ddc785", "row_index": 352, "timestamp": "2017-02-20T00:27:00Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIA3JSUOQCUGDDKXCAI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41b285e5-d61c-4f4c-b86c-11e6f4ddc785", "eventTime": "2017-02-20T00:27:00Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIA3JSUOQCUGDDKXCAI", "userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ac226548-3a3e-4248-b713-e45d20a204a9", "record_id": "flaws_cloudtrail:0000353:9ac226548-3a3e-4248-b713-e45d20a204a9", "row_index": 353, "timestamp": "2017-02-20T00:27:18Z", "event_type": "ListStreamingDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ac226548-3a3e-4248-b713-e45d20a204a9", "eventTime": "2017-02-20T00:27:18Z", "eventName": "ListStreamingDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": "100"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d9226b7-3899-4f54-a8af-590493f7c36a", "record_id": "flaws_cloudtrail:0000354:6d9226b7-3899-4f54-a8af-590493f7c36a", "row_index": 354, "timestamp": "2017-02-20T00:27:18Z", "event_type": "ListStreamingDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d9226b7-3899-4f54-a8af-590493f7c36a", "eventTime": "2017-02-20T00:27:18Z", "eventName": "ListStreamingDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": "100"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13964-854c-4f29-800b-806f83a3bd0c", "record_id": "flaws_cloudtrail:0000355:13964-854c-4f29-800b-806f83a3bd0c", "row_index": 355, "timestamp": "2017-02-20T00:27:18Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13964-854c-4f29-800b-806f83a3bd0c", "eventTime": "2017-02-20T00:27:18Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": "1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a96ff1e9-3603-46bc-b40a-3bffc67e833d", "record_id": "flaws_cloudtrail:0000356:a96ff1e9-3603-46bc-b40a-3bffc67e833d", "row_index": 356, "timestamp": "2017-02-20T00:27:18Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Coral/Netty4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a96ff1e9-3603-46bc-b40a-3bffc67e833d", "eventTime": "2017-02-20T00:27:18Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Coral/Netty4", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 100, "certificateStatuses": ["ISSUED"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bf67d71-e221-47bf-a5f1-c4f42f4e1707", "record_id": "flaws_cloudtrail:0000357:6bf67d71-e221-47bf-a5f1-c4f42f4e1707", "row_index": 357, "timestamp": "2017-02-20T00:27:18Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bf67d71-e221-47bf-a5f1-c4f42f4e1707", "eventTime": "2017-02-20T00:27:18Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pathPrefix": "/cloudfront/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e626f7cf-9169-4c88-b137-0f1f5cb9b05a", "record_id": "flaws_cloudtrail:0000358:e626f7cf-9169-4c88-b137-0f1f5cb9b05a", "row_index": 358, "timestamp": "2017-02-20T00:27:18Z", "event_type": "ListStreamingDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e626f7cf-9169-4c88-b137-0f1f5cb9b05a", "eventTime": "2017-02-20T00:27:18Z", "eventName": "ListStreamingDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": "1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb956405b-a170-4d8f-886f-091001214a88", "record_id": "flaws_cloudtrail:0000359:bb956405b-a170-4d8f-886f-091001214a88", "row_index": 359, "timestamp": "2017-02-20T00:27:18Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb956405b-a170-4d8f-886f-091001214a88", "eventTime": "2017-02-20T00:27:18Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": "100"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6c095bb-fb82-44bc-82bc-7fb7e534ecac", "record_id": "flaws_cloudtrail:0000360:f6c095bb-fb82-44bc-82bc-7fb7e534ecac", "row_index": 360, "timestamp": "2017-02-20T00:27:18Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6c095bb-fb82-44bc-82bc-7fb7e534ecac", "eventTime": "2017-02-20T00:27:18Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": "100"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd60cb8b-4f8c-4e41-9fb5-910862a2c4db", "record_id": "flaws_cloudtrail:0000361:dd60cb8b-4f8c-4e41-9fb5-910862a2c4db", "row_index": 361, "timestamp": "2017-02-20T00:27:47Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd60cb8b-4f8c-4e41-9fb5-910862a2c4db", "eventTime": "2017-02-20T00:27:47Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e13927c-e3bf-4ad2-b9d5-5b46e82891cb", "record_id": "flaws_cloudtrail:0000362:1e13927c-e3bf-4ad2-b9d5-5b46e82891cb", "row_index": 362, "timestamp": "2017-02-20T00:27:55Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Coral/Netty4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e13927c-e3bf-4ad2-b9d5-5b46e82891cb", "eventTime": "2017-02-20T00:27:55Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Coral/Netty4", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 100, "certificateStatuses": ["ISSUED"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccfc0f69-28e9-41d7-a9c4-02cc81e64e3b", "record_id": "flaws_cloudtrail:0000363:ccfc0f69-28e9-41d7-a9c4-02cc81e64e3b", "row_index": 363, "timestamp": "2017-02-20T00:27:55Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccfc0f69-28e9-41d7-a9c4-02cc81e64e3b", "eventTime": "2017-02-20T00:27:55Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": "100"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9957b8a8-33ee-4603-893f-482eb7e6d344", "record_id": "flaws_cloudtrail:0000364:9957b8a8-33ee-4603-893f-482eb7e6d344", "row_index": 364, "timestamp": "2017-02-20T00:27:55Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9957b8a8-33ee-4603-893f-482eb7e6d344", "eventTime": "2017-02-20T00:27:55Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": "100"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dec9443-0005-4468-b74d-5d85d71415a9", "record_id": "flaws_cloudtrail:0000365:8dec9443-0005-4468-b74d-5d85d71415a9", "row_index": 365, "timestamp": "2017-02-20T00:27:55Z", "event_type": "ListStreamingDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dec9443-0005-4468-b74d-5d85d71415a9", "eventTime": "2017-02-20T00:27:55Z", "eventName": "ListStreamingDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": "1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b9ff13a-0f3f-43b8-a499-6cb999f841b9", "record_id": "flaws_cloudtrail:0000366:9b9ff13a-0f3f-43b8-a499-6cb999f841b9", "row_index": 366, "timestamp": "2017-02-20T00:27:55Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b9ff13a-0f3f-43b8-a499-6cb999f841b9", "eventTime": "2017-02-20T00:27:55Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": "1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92602dd5-2a5f-4d74-9155-02c6da5e6240", "record_id": "flaws_cloudtrail:0000367:92602dd5-2a5f-4d74-9155-02c6da5e6240", "row_index": 367, "timestamp": "2017-02-20T00:27:55Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92602dd5-2a5f-4d74-9155-02c6da5e6240", "eventTime": "2017-02-20T00:27:55Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pathPrefix": "/cloudfront/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "038db148-3945-4fb0-a6b5-ee3636dbdc6e", "record_id": "flaws_cloudtrail:0000368:038db148-3945-4fb0-a6b5-ee3636dbdc6e", "row_index": 368, "timestamp": "2017-02-20T00:27:56Z", "event_type": "ListStreamingDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "038db148-3945-4fb0-a6b5-ee3636dbdc6e", "eventTime": "2017-02-20T00:27:56Z", "eventName": "ListStreamingDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": "100"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1deb28a-5526-40a9-958d-a506a1966634", "record_id": "flaws_cloudtrail:0000369:b1deb28a-5526-40a9-958d-a506a1966634", "row_index": 369, "timestamp": "2017-02-20T00:27:56Z", "event_type": "ListStreamingDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1deb28a-5526-40a9-958d-a506a1966634", "eventTime": "2017-02-20T00:27:56Z", "eventName": "ListStreamingDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": "100"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "482452f0a-02f3-4d51-b2dd-59725daea01f", "record_id": "flaws_cloudtrail:0000370:482452f0a-02f3-4d51-b2dd-59725daea01f", "row_index": 370, "timestamp": "2017-02-20T00:28:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "482452f0a-02f3-4d51-b2dd-59725daea01f", "eventTime": "2017-02-20T00:28:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "ca-central-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03bf99e9-94b2-4717-8a35-5cbb56e4cdbb", "record_id": "flaws_cloudtrail:0000371:03bf99e9-94b2-4717-8a35-5cbb56e4cdbb", "row_index": 371, "timestamp": "2017-02-20T00:28:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03bf99e9-94b2-4717-8a35-5cbb56e4cdbb", "eventTime": "2017-02-20T00:28:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "ca-central-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "295030b0a-6982-4fe3-9305-96c71327f79", "record_id": "flaws_cloudtrail:0000372:295030b0a-6982-4fe3-9305-96c71327f79", "row_index": 372, "timestamp": "2017-02-20T00:28:05Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "295030b0a-6982-4fe3-9305-96c71327f79", "eventTime": "2017-02-20T00:28:05Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"pathPrefix": "/cloudfront/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "437701ed-c928-45b2-acc3-5c89b2eecbec", "record_id": "flaws_cloudtrail:0000373:437701ed-c928-45b2-acc3-5c89b2eecbec", "row_index": 373, "timestamp": "2017-02-20T00:28:05Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[AWSConsole, aws-internal/3]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 631, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "437701ed-c928-45b2-acc3-5c89b2eecbec", "eventTime": "2017-02-20T00:28:05Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[AWSConsole, aws-internal/3]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15070e6-cc12-4782-b5ad-45e24b5beb5a", "record_id": "flaws_cloudtrail:0000374:15070e6-cc12-4782-b5ad-45e24b5beb5a", "row_index": 374, "timestamp": "2017-02-20T00:28:05Z", "event_type": "ListWebACLs", "event_source": "waf.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15070e6-cc12-4782-b5ad-45e24b5beb5a", "eventTime": "2017-02-20T00:28:05Z", "eventName": "ListWebACLs", "eventSource": "waf.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"limit": 20}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a8a4e9b-81ee-4cf5-9ede-9b5ee7f6247d", "record_id": "flaws_cloudtrail:0000375:3a8a4e9b-81ee-4cf5-9ede-9b5ee7f6247d", "row_index": 375, "timestamp": "2017-02-20T00:28:05Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Coral/Netty4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a8a4e9b-81ee-4cf5-9ede-9b5ee7f6247d", "eventTime": "2017-02-20T00:28:05Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Coral/Netty4", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 100, "certificateStatuses": ["ISSUED"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd317526-2e29-4cd7-a7c2-71a93f1fdf50", "record_id": "flaws_cloudtrail:0000376:cd317526-2e29-4cd7-a7c2-71a93f1fdf50", "row_index": 376, "timestamp": "2017-02-20T00:28:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd317526-2e29-4cd7-a7c2-71a93f1fdf50", "eventTime": "2017-02-20T00:28:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c31521c8-540a-406b-a958-54e0f51934", "record_id": "flaws_cloudtrail:0000377:c31521c8-540a-406b-a958-54e0f51934", "row_index": 377, "timestamp": "2017-02-20T00:28:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c31521c8-540a-406b-a958-54e0f51934", "eventTime": "2017-02-20T00:28:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68a4c5c5-77ac-43d7-8507-8a19303b6080", "record_id": "flaws_cloudtrail:0000378:68a4c5c5-77ac-43d7-8507-8a19303b6080", "row_index": 378, "timestamp": "2017-02-20T00:28:05Z", "event_type": "ListCloudFrontOriginAccessIdentities", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68a4c5c5-77ac-43d7-8507-8a19303b6080", "eventTime": "2017-02-20T00:28:05Z", "eventName": "ListCloudFrontOriginAccessIdentities", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b11ea1d-d506-4737-a5f2-ec18edfc4d48", "record_id": "flaws_cloudtrail:0000379:5b11ea1d-d506-4737-a5f2-ec18edfc4d48", "row_index": 379, "timestamp": "2017-02-20T00:28:05Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[AWSConsole, aws-internal/3]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 631, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b11ea1d-d506-4737-a5f2-ec18edfc4d48", "eventTime": "2017-02-20T00:28:05Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[AWSConsole, aws-internal/3]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5c172fc-7d09-46ff-a0b3-75ebe3f99482", "record_id": "flaws_cloudtrail:0000380:b5c172fc-7d09-46ff-a0b3-75ebe3f99482", "row_index": 380, "timestamp": "2017-02-20T00:28:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5c172fc-7d09-46ff-a0b3-75ebe3f99482", "eventTime": "2017-02-20T00:28:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62a1e9b0-739e-4fba-a49f-7ddee6c5e6ba", "record_id": "flaws_cloudtrail:0000381:62a1e9b0-739e-4fba-a49f-7ddee6c5e6ba", "row_index": 381, "timestamp": "2017-02-20T00:28:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62a1e9b0-739e-4fba-a49f-7ddee6c5e6ba", "eventTime": "2017-02-20T00:28:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f12d8d58-a068-4f13-a791-047ba64fde64", "record_id": "flaws_cloudtrail:0000382:f12d8d58-a068-4f13-a791-047ba64fde64", "row_index": 382, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f12d8d58-a068-4f13-a791-047ba64fde64", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89fbe19b-ab6b-4b1e-a0d4-df25274a2b99", "record_id": "flaws_cloudtrail:0000383:89fbe19b-ab6b-4b1e-a0d4-df25274a2b99", "row_index": 383, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89fbe19b-ab6b-4b1e-a0d4-df25274a2b99", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94b68d0c-7d8f-45a1-a502-9aa11d23a7d3", "record_id": "flaws_cloudtrail:0000384:94b68d0c-7d8f-45a1-a502-9aa11d23a7d3", "row_index": 384, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94b68d0c-7d8f-45a1-a502-9aa11d23a7d3", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6193c9c0-6d08-4ddf-ad5d-ce6c44b559dd", "record_id": "flaws_cloudtrail:0000385:6193c9c0-6d08-4ddf-ad5d-ce6c44b559dd", "row_index": 385, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6193c9c0-6d08-4ddf-ad5d-ce6c44b559dd", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01c864d8-948e-4b50-8292-3abe8e4f9123", "record_id": "flaws_cloudtrail:0000386:01c864d8-948e-4b50-8292-3abe8e4f9123", "row_index": 386, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01c864d8-948e-4b50-8292-3abe8e4f9123", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8e1d8d7-7b33-4f63-9c4d-8f391a13659d", "record_id": "flaws_cloudtrail:0000387:b8e1d8d7-7b33-4f63-9c4d-8f391a13659d", "row_index": 387, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8e1d8d7-7b33-4f63-9c4d-8f391a13659d", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47fc2a19-a49d-4bf2-ad97-5ddebe09dc24", "record_id": "flaws_cloudtrail:0000388:47fc2a19-a49d-4bf2-ad97-5ddebe09dc24", "row_index": 388, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47fc2a19-a49d-4bf2-ad97-5ddebe09dc24", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f01efe3-6c5c-4aca-9881-5eb455a2f37d", "record_id": "flaws_cloudtrail:0000389:7f01efe3-6c5c-4aca-9881-5eb455a2f37d", "row_index": 389, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f01efe3-6c5c-4aca-9881-5eb455a2f37d", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57b7aae9-ea64-42d7-9d77-60eacd4aed68", "record_id": "flaws_cloudtrail:0000390:57b7aae9-ea64-42d7-9d77-60eacd4aed68", "row_index": 390, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57b7aae9-ea64-42d7-9d77-60eacd4aed68", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3ac8c2d-df7b-4d3b-a311-142f934801e5", "record_id": "flaws_cloudtrail:0000391:f3ac8c2d-df7b-4d3b-a311-142f934801e5", "row_index": 391, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3ac8c2d-df7b-4d3b-a311-142f934801e5", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c25789-a196-47ba-b6bd-77cb78411114", "record_id": "flaws_cloudtrail:0000392:6c25789-a196-47ba-b6bd-77cb78411114", "row_index": 392, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c25789-a196-47ba-b6bd-77cb78411114", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "eu-central-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71dc6744-ef9e-40b7-be1e-7bf24793ad92", "record_id": "flaws_cloudtrail:0000393:71dc6744-ef9e-40b7-be1e-7bf24793ad92", "row_index": 393, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71dc6744-ef9e-40b7-be1e-7bf24793ad92", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "eu-central-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6609bbc8-112b-4f4b-afb9-6a727ae37503", "record_id": "flaws_cloudtrail:0000394:6609bbc8-112b-4f4b-afb9-6a727ae37503", "row_index": 394, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6609bbc8-112b-4f4b-afb9-6a727ae37503", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "eu-west-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aec1130-6f99-412f-9d40-ead7ef481c1f", "record_id": "flaws_cloudtrail:0000395:7aec1130-6f99-412f-9d40-ead7ef481c1f", "row_index": 395, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aec1130-6f99-412f-9d40-ead7ef481c1f", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "eu-west-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42a937f1-bd00-4ce7-a346-347a5a8f9955", "record_id": "flaws_cloudtrail:0000396:42a937f1-bd00-4ce7-a346-347a5a8f9955", "row_index": 396, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42a937f1-bd00-4ce7-a346-347a5a8f9955", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "eu-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6c035398-8ded-45e9-b2f9-a0e1881dc4e5", "record_id": "flaws_cloudtrail:0000397:d6c035398-8ded-45e9-b2f9-a0e1881dc4e5", "row_index": 397, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6c035398-8ded-45e9-b2f9-a0e1881dc4e5", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "eu-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b0171f5-dbd7-4c76-a497-57fc85916e06", "record_id": "flaws_cloudtrail:0000398:1b0171f5-dbd7-4c76-a497-57fc85916e06", "row_index": 398, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b0171f5-dbd7-4c76-a497-57fc85916e06", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "sa-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d553e99f-b611-4ca1-928a-37f28ccbec80", "record_id": "flaws_cloudtrail:0000399:d553e99f-b611-4ca1-928a-37f28ccbec80", "row_index": 399, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d553e99f-b611-4ca1-928a-37f28ccbec80", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "sa-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6ea2b0c-9b56-49c8-afe3-b8ea63507fc7", "record_id": "flaws_cloudtrail:0000400:c6ea2b0c-9b56-49c8-afe3-b8ea63507fc7", "row_index": 400, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6ea2b0c-9b56-49c8-afe3-b8ea63507fc7", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4cbdf92-b8c0-42dd-9979-c397f49827", "record_id": "flaws_cloudtrail:0000401:b4cbdf92-b8c0-42dd-9979-c397f49827", "row_index": 401, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4cbdf92-b8c0-42dd-9979-c397f49827", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3742b61-58cd-4ff7-bfe3-3a442383c545", "record_id": "flaws_cloudtrail:0000402:d3742b61-58cd-4ff7-bfe3-3a442383c545", "row_index": 402, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3742b61-58cd-4ff7-bfe3-3a442383c545", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8513b6f4-80c9-4334-ab42-5c786b0e9381", "record_id": "flaws_cloudtrail:0000403:8513b6f4-80c9-4334-ab42-5c786b0e9381", "row_index": 403, "timestamp": "2017-02-20T00:28:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAJMSH5T0Q30UARNB7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8513b6f4-80c9-4334-ab42-5c786b0e9381", "eventTime": "2017-02-20T00:28:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAJMSH5T0Q30UARNB7", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a173b7a2-80fe-4656-81d2-55759e9c759a", "record_id": "flaws_cloudtrail:0000404:a173b7a2-80fe-4656-81d2-55759e9c759a", "row_index": 404, "timestamp": "2017-02-20T01:07:47Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/level5/level5", "account_id": "811596193553", "principal_id": "AROAPGLC1Z54BY9Z8RY22:level5", "user_name": null, "access_key_id": "ASIAQE16P9P5R9SB9FZZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/level5", "session_issuer_user_name": "level5"}, "network": {"source_ip": "6.2.252.250", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a173b7a2-80fe-4656-81d2-55759e9c759a", "eventTime": "2017-02-20T01:07:47Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.2.252.250", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAPGLC1Z54BY9Z8RY22:level5", "arn": "arn:aws:sts::811596193553:assumed-role/level5/level5", "accountId": "811596193553", "accessKeyId": "ASIAQE16P9P5R9SB9FZZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-19T21:00:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAPGLC1Z54BY9Z8RY22", "arn": "arn:aws:iam::811596193553:role/service-role/level5", "accountId": "811596193553", "userName": "level5"}}}, "requestParameters": {"logGroupName": "/aws/lambda/level5", "logStreamName": "2017/02/20/[$LATEST]6d0212ac1e2a41ff8719a061f8b3c580"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18f249a8-cb36-4ab3-95a1-0feb4b8bdc1b", "record_id": "flaws_cloudtrail:0000405:18f249a8-cb36-4ab3-95a1-0feb4b8bdc1b", "row_index": 405, "timestamp": "2017-02-20T01:12:35Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIA3JSUOQCUGDDKXCAI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18f249a8-cb36-4ab3-95a1-0feb4b8bdc1b", "eventTime": "2017-02-20T01:12:35Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level5 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis/puspzvwgb6/resources", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIA3JSUOQCUGDDKXCAI", "userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e52f5ed-f07c-4fa6-b537-02af022df992", "record_id": "flaws_cloudtrail:0000406:1e52f5ed-f07c-4fa6-b537-02af022df992", "row_index": 406, "timestamp": "2017-02-20T01:13:00Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e52f5ed-f07c-4fa6-b537-02af022df992", "eventTime": "2017-02-20T01:13:00Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10ff0f85-045a-4979-8576-9c3dd0fb8785", "record_id": "flaws_cloudtrail:0000407:10ff0f85-045a-4979-8576-9c3dd0fb8785", "row_index": 407, "timestamp": "2017-02-20T01:13:00Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10ff0f85-045a-4979-8576-9c3dd0fb8785", "eventTime": "2017-02-20T01:13:00Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a26f1c6-6e88-4eec-9733-b795613ed594", "record_id": "flaws_cloudtrail:0000408:4a26f1c6-6e88-4eec-9733-b795613ed594", "row_index": 408, "timestamp": "2017-02-20T01:13:00Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a26f1c6-6e88-4eec-9733-b795613ed594", "eventTime": "2017-02-20T01:13:00Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a472f5e9-a4da-4b6f-8de8-eeada1aaae4a", "record_id": "flaws_cloudtrail:0000409:a472f5e9-a4da-4b6f-8de8-eeada1aaae4a", "row_index": 409, "timestamp": "2017-02-20T01:13:00Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a472f5e9-a4da-4b6f-8de8-eeada1aaae4a", "eventTime": "2017-02-20T01:13:00Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3c14a62-2b32-44b9-84b7-20b784737e03", "record_id": "flaws_cloudtrail:0000410:b3c14a62-2b32-44b9-84b7-20b784737e03", "row_index": 410, "timestamp": "2017-02-20T01:13:00Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3c14a62-2b32-44b9-84b7-20b784737e03", "eventTime": "2017-02-20T01:13:00Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf02724-bcd8-42d5-b601-a5183c87955", "record_id": "flaws_cloudtrail:0000411:bf02724-bcd8-42d5-b601-a5183c87955", "row_index": 411, "timestamp": "2017-02-20T01:13:06Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf02724-bcd8-42d5-b601-a5183c87955", "eventTime": "2017-02-20T01:13:06Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"roleName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "290e7bb4-2c55-494e-9a8c-b4ae46ac7815", "record_id": "flaws_cloudtrail:0000412:290e7bb4-2c55-494e-9a8c-b4ae46ac7815", "row_index": 412, "timestamp": "2017-02-20T01:13:06Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "290e7bb4-2c55-494e-9a8c-b4ae46ac7815", "eventTime": "2017-02-20T01:13:06Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "643636b81-33a1-4fd1-877e-33d84b15d1be", "record_id": "flaws_cloudtrail:0000413:643636b81-33a1-4fd1-877e-33d84b15d1be", "row_index": 413, "timestamp": "2017-02-20T01:13:06Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "643636b81-33a1-4fd1-877e-33d84b15d1be", "eventTime": "2017-02-20T01:13:06Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"roleName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85a18769-2bbb-445e-9f1e-5b2f1be054e1", "record_id": "flaws_cloudtrail:0000414:85a18769-2bbb-445e-9f1e-5b2f1be054e1", "row_index": 414, "timestamp": "2017-02-20T01:13:06Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85a18769-2bbb-445e-9f1e-5b2f1be054e1", "eventTime": "2017-02-20T01:13:06Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e97fae60-a280-4601-991e-1d64c9d1db3a", "record_id": "flaws_cloudtrail:0000415:e97fae60-a280-4601-991e-1d64c9d1db3a", "row_index": 415, "timestamp": "2017-02-20T01:13:06Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e97fae60-a280-4601-991e-1d64c9d1db3a", "eventTime": "2017-02-20T01:13:06Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f6b0e04-a923-4b75-be4d-e4508b2e7e8f", "record_id": "flaws_cloudtrail:0000416:0f6b0e04-a923-4b75-be4d-e4508b2e7e8f", "row_index": 416, "timestamp": "2017-02-20T01:13:09Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f6b0e04-a923-4b75-be4d-e4508b2e7e8f", "eventTime": "2017-02-20T01:13:09Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"roleName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce94b223-fc7f-4f85-8d83-185a73187d1c", "record_id": "flaws_cloudtrail:0000417:ce94b223-fc7f-4f85-8d83-185a73187d1c", "row_index": 417, "timestamp": "2017-02-20T01:13:14Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce94b223-fc7f-4f85-8d83-185a73187d1c", "eventTime": "2017-02-20T01:13:14Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2a67d9a-b942-4c84-ad7e-db15828868c8", "record_id": "flaws_cloudtrail:0000418:b2a67d9a-b942-4c84-ad7e-db15828868c8", "row_index": 418, "timestamp": "2017-02-20T01:14:28Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2a67d9a-b942-4c84-ad7e-db15828868c8", "eventTime": "2017-02-20T01:14:28Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25763fef-d4fc-41e4-92cd-6b067c1aab89", "record_id": "flaws_cloudtrail:0000419:25763fef-d4fc-41e4-92cd-6b067c1aab89", "row_index": 419, "timestamp": "2017-02-20T01:14:31Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25763fef-d4fc-41e4-92cd-6b067c1aab89", "eventTime": "2017-02-20T01:14:31Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9dddd3d-7ade-4c39-9491-f9c14251e", "record_id": "flaws_cloudtrail:0000420:c9dddd3d-7ade-4c39-9491-f9c14251e", "row_index": 420, "timestamp": "2017-02-20T01:14:32Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9dddd3d-7ade-4c39-9491-f9c14251e", "eventTime": "2017-02-20T01:14:32Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v9"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1fc2794-c93b-4f75-bd9e-0b7827721c2e", "record_id": "flaws_cloudtrail:0000421:a1fc2794-c93b-4f75-bd9e-0b7827721c2e", "row_index": 421, "timestamp": "2017-02-20T01:14:32Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1fc2794-c93b-4f75-bd9e-0b7827721c2e", "eventTime": "2017-02-20T01:14:32Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebbecb39-b2d3-485e-9571-047029e257406", "record_id": "flaws_cloudtrail:0000422:ebbecb39-b2d3-485e-9571-047029e257406", "row_index": 422, "timestamp": "2017-02-20T01:15:21Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebbecb39-b2d3-485e-9571-047029e257406", "eventTime": "2017-02-20T01:15:21Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d615ae2b-aca4-4027-b53e-e456280785e6", "record_id": "flaws_cloudtrail:0000423:d615ae2b-aca4-4027-b53e-e456280785e6", "row_index": 423, "timestamp": "2017-02-20T01:15:21Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d615ae2b-aca4-4027-b53e-e456280785e6", "eventTime": "2017-02-20T01:15:21Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d8c7bd6-ebbd-41da-a4ad-7358eccd5d4c", "record_id": "flaws_cloudtrail:0000424:6d8c7bd6-ebbd-41da-a4ad-7358eccd5d4c", "row_index": 424, "timestamp": "2017-02-20T01:15:21Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d8c7bd6-ebbd-41da-a4ad-7358eccd5d4c", "eventTime": "2017-02-20T01:15:21Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fc0c57b-e993-4fbd-b0fa-93920da0da61", "record_id": "flaws_cloudtrail:0000425:8fc0c57b-e993-4fbd-b0fa-93920da0da61", "row_index": 425, "timestamp": "2017-02-20T01:15:21Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fc0c57b-e993-4fbd-b0fa-93920da0da61", "eventTime": "2017-02-20T01:15:21Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fe7b5d3-11da-4fe5-b595-a72dc964d6ed", "record_id": "flaws_cloudtrail:0000426:5fe7b5d3-11da-4fe5-b595-a72dc964d6ed", "row_index": 426, "timestamp": "2017-02-20T01:15:21Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fe7b5d3-11da-4fe5-b595-a72dc964d6ed", "eventTime": "2017-02-20T01:15:21Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61c5c82a-1ca0-4cc3-b580-c2039d7c73e8", "record_id": "flaws_cloudtrail:0000427:61c5c82a-1ca0-4cc3-b580-c2039d7c73e8", "row_index": 427, "timestamp": "2017-02-20T01:15:22Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61c5c82a-1ca0-4cc3-b580-c2039d7c73e8", "eventTime": "2017-02-20T01:15:22Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b1e5041-75d6-496e-b002-e925b6dd6deb", "record_id": "flaws_cloudtrail:0000428:1b1e5041-75d6-496e-b002-e925b6dd6deb", "row_index": 428, "timestamp": "2017-02-20T01:15:22Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b1e5041-75d6-496e-b002-e925b6dd6deb", "eventTime": "2017-02-20T01:15:22Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8247e371-7016-4a7c-b2e6-ad75435d1", "record_id": "flaws_cloudtrail:0000429:8247e371-7016-4a7c-b2e6-ad75435d1", "row_index": 429, "timestamp": "2017-02-20T01:15:22Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8247e371-7016-4a7c-b2e6-ad75435d1", "eventTime": "2017-02-20T01:15:22Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a8e1ac4-1b79-429b-b2fa-c82f9ad4830e", "record_id": "flaws_cloudtrail:0000430:6a8e1ac4-1b79-429b-b2fa-c82f9ad4830e", "row_index": 430, "timestamp": "2017-02-20T01:15:22Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a8e1ac4-1b79-429b-b2fa-c82f9ad4830e", "eventTime": "2017-02-20T01:15:22Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ac120dd-aae3-4858-bac6-eaa564703d037", "record_id": "flaws_cloudtrail:0000431:6ac120dd-aae3-4858-bac6-eaa564703d037", "row_index": 431, "timestamp": "2017-02-20T01:15:22Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ac120dd-aae3-4858-bac6-eaa564703d037", "eventTime": "2017-02-20T01:15:22Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5849bf26-cd4d-43a2-bdec-39db61a0dacd", "record_id": "flaws_cloudtrail:0000432:5849bf26-cd4d-43a2-bdec-39db61a0dacd", "row_index": 432, "timestamp": "2017-02-20T01:15:26Z", "event_type": "GetAccountSettings08306", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5849bf26-cd4d-43a2-bdec-39db61a0dacd", "eventTime": "2017-02-20T01:15:26Z", "eventName": "GetAccountSettings08306", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"includePreviewFeatures": true}, "responseElements": {"previewFeatures": [], "accountUsage": {"totalCodeSize": 304, "functionCount": 1}, "accountLimit": {"concurrentExecutions": 100, "codeSizeZipped": 52428800, "totalCodeSize": 80530636800, "codeSizeUnzipped": 262144000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "623812c2a-1527-4919-b035-2c6ff2166b91", "record_id": "flaws_cloudtrail:0000433:623812c2a-1527-4919-b035-2c6ff2166b91", "row_index": 433, "timestamp": "2017-02-20T01:15:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "623812c2a-1527-4919-b035-2c6ff2166b91", "eventTime": "2017-02-20T01:15:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "471e3fea-aada-4a92-8c3a-0a1cfb61fb73", "record_id": "flaws_cloudtrail:0000434:471e3fea-aada-4a92-8c3a-0a1cfb61fb73", "row_index": 434, "timestamp": "2017-02-20T01:15:27Z", "event_type": "GetAccountSettings08306", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "471e3fea-aada-4a92-8c3a-0a1cfb61fb73", "eventTime": "2017-02-20T01:15:27Z", "eventName": "GetAccountSettings08306", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"includePreviewFeatures": true}, "responseElements": {"previewFeatures": [], "accountUsage": {"totalCodeSize": 304, "functionCount": 1}, "accountLimit": {"concurrentExecutions": 100, "codeSizeZipped": 52428800, "totalCodeSize": 80530636800, "codeSizeUnzipped": 262144000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25c3b2e7-cce6-477a-a420-25a1e2e16ced", "record_id": "flaws_cloudtrail:0000435:25c3b2e7-cce6-477a-a420-25a1e2e16ced", "row_index": 435, "timestamp": "2017-02-20T01:15:28Z", "event_type": "ListVersionsByFunction202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25c3b2e7-cce6-477a-a420-25a1e2e16ced", "eventTime": "2017-02-20T01:15:28Z", "eventName": "ListVersionsByFunction202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80045f65-9fa2-4b70-9ad5-4ee9088d2854", "record_id": "flaws_cloudtrail:0000436:80045f65-9fa2-4b70-9ad5-4ee9088d2854", "row_index": 436, "timestamp": "2017-02-20T01:15:28Z", "event_type": "ListAliases202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80045f65-9fa2-4b70-9ad5-4ee9088d2854", "eventTime": "2017-02-20T01:15:28Z", "eventName": "ListAliases202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"marker": "$DEFAULT", "functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c067bf3-28c0-48a7-ac66-eda337426c4b8", "record_id": "flaws_cloudtrail:0000437:3c067bf3-28c0-48a7-ac66-eda337426c4b8", "row_index": 437, "timestamp": "2017-02-20T01:15:29Z", "event_type": "GetAccountSettings08306", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c067bf3-28c0-48a7-ac66-eda337426c4b8", "eventTime": "2017-02-20T01:15:29Z", "eventName": "GetAccountSettings08306", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"includePreviewFeatures": true}, "responseElements": {"previewFeatures": [], "accountUsage": {"totalCodeSize": 304, "functionCount": 1}, "accountLimit": {"concurrentExecutions": 100, "codeSizeZipped": 52428800, "totalCodeSize": 80530636800, "codeSizeUnzipped": 262144000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "400b39d5-f585-4cfa-8209-20aa3ac0f684", "record_id": "flaws_cloudtrail:0000438:400b39d5-f585-4cfa-8209-20aa3ac0f684", "row_index": 438, "timestamp": "2017-02-20T01:15:29Z", "event_type": "GetAccountSettings08306", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "400b39d5-f585-4cfa-8209-20aa3ac0f684", "eventTime": "2017-02-20T01:15:29Z", "eventName": "GetAccountSettings08306", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"includePreviewFeatures": true}, "responseElements": {"previewFeatures": [], "accountUsage": {"totalCodeSize": 304, "functionCount": 1}, "accountLimit": {"concurrentExecutions": 100, "codeSizeZipped": 52428800, "totalCodeSize": 80530636800, "codeSizeUnzipped": 262144000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa4c334e-9d45-432f-b5b7-469c399576c56", "record_id": "flaws_cloudtrail:0000439:aa4c334e-9d45-432f-b5b7-469c399576c56", "row_index": 439, "timestamp": "2017-02-20T01:15:29Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa4c334e-9d45-432f-b5b7-469c399576c56", "eventTime": "2017-02-20T01:15:29Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"qualifier": "$LATEST", "functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f9ff1d0-c287-4fdd-bc19-2580cc72638", "record_id": "flaws_cloudtrail:0000440:6f9ff1d0-c287-4fdd-bc19-2580cc72638", "row_index": 440, "timestamp": "2017-02-20T01:15:29Z", "event_type": "GetAccountSettings08306", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f9ff1d0-c287-4fdd-bc19-2580cc72638", "eventTime": "2017-02-20T01:15:29Z", "eventName": "GetAccountSettings08306", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"includePreviewFeatures": true}, "responseElements": {"previewFeatures": [], "accountUsage": {"totalCodeSize": 304, "functionCount": 1}, "accountLimit": {"concurrentExecutions": 100, "codeSizeZipped": 52428800, "totalCodeSize": 80530636800, "codeSizeUnzipped": 262144000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0ca0ec3-19c0-416e-a001-95ef498f7c52", "record_id": "flaws_cloudtrail:0000441:e0ca0ec3-19c0-416e-a001-95ef498f7c52", "row_index": 441, "timestamp": "2017-02-20T01:15:32Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0ca0ec3-19c0-416e-a001-95ef498f7c52", "eventTime": "2017-02-20T01:15:32Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1387aed3-a27f-4cc9-913f-36fa7b21a682", "record_id": "flaws_cloudtrail:0000442:1387aed3-a27f-4cc9-913f-36fa7b21a682", "row_index": 442, "timestamp": "2017-02-20T01:15:32Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1387aed3-a27f-4cc9-913f-36fa7b21a682", "eventTime": "2017-02-20T01:15:32Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e1ba84f-d527-4404-8513-78c65755d6e0", "record_id": "flaws_cloudtrail:0000443:4e1ba84f-d527-4404-8513-78c65755d6e0", "row_index": 443, "timestamp": "2017-02-20T01:15:33Z", "event_type": "ListAliases", "event_source": "kms.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e1ba84f-d527-4404-8513-78c65755d6e0", "eventTime": "2017-02-20T01:15:33Z", "eventName": "ListAliases", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce2b6be9-b343-4b8e-b79b-c61a6dc9ee00", "record_id": "flaws_cloudtrail:0000444:ce2b6be9-b343-4b8e-b79b-c61a6dc9ee00", "row_index": 444, "timestamp": "2017-02-20T01:15:34Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce2b6be9-b343-4b8e-b79b-c61a6dc9ee00", "eventTime": "2017-02-20T01:15:34Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07c7708f-7b7b-43a4-848c-4dad4b29b410", "record_id": "flaws_cloudtrail:0000445:07c7708f-7b7b-43a4-848c-4dad4b29b410", "row_index": 445, "timestamp": "2017-02-20T01:15:34Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07c7708f-7b7b-43a4-848c-4dad4b29b410", "eventTime": "2017-02-20T01:15:34Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c096791e5-7823-4043-a865-00999ff6bf", "record_id": "flaws_cloudtrail:0000446:c096791e5-7823-4043-a865-00999ff6bf", "row_index": 446, "timestamp": "2017-02-20T01:15:34Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c096791e5-7823-4043-a865-00999ff6bf", "eventTime": "2017-02-20T01:15:34Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08f92bc1-836f-4a05-afdc-8bd18f658748", "record_id": "flaws_cloudtrail:0000447:08f92bc1-836f-4a05-afdc-8bd18f658748", "row_index": 447, "timestamp": "2017-02-20T01:15:34Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08f92bc1-836f-4a05-afdc-8bd18f658748", "eventTime": "2017-02-20T01:15:34Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27892f27-2edd-4769-94a1-fee1d98cc0c0", "record_id": "flaws_cloudtrail:0000448:27892f27-2edd-4769-94a1-fee1d98cc0c0", "row_index": 448, "timestamp": "2017-02-20T01:15:34Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27892f27-2edd-4769-94a1-fee1d98cc0c0", "eventTime": "2017-02-20T01:15:34Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d23c39f7-45d2-44f4-a7da-ab6e6b592fc9", "record_id": "flaws_cloudtrail:0000449:d23c39f7-45d2-44f4-a7da-ab6e6b592fc9", "row_index": 449, "timestamp": "2017-02-20T01:15:34Z", "event_type": "ListEventSourceMappings202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d23c39f7-45d2-44f4-a7da-ab6e6b592fc9", "eventTime": "2017-02-20T01:15:34Z", "eventName": "ListEventSourceMappings202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a7fbfcc-4e34-4ffc-a82b-1d0477213cba", "record_id": "flaws_cloudtrail:0000450:5a7fbfcc-4e34-4ffc-a82b-1d0477213cba", "row_index": 450, "timestamp": "2017-02-20T01:15:34Z", "event_type": "ListEventSourceMappings202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a7fbfcc-4e34-4ffc-a82b-1d0477213cba", "eventTime": "2017-02-20T01:15:34Z", "eventName": "ListEventSourceMappings202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3eb54db5-b0d6-482f-b1cb-d1dbd2231bf7", "record_id": "flaws_cloudtrail:0000451:3eb54db5-b0d6-482f-b1cb-d1dbd2231bf7", "row_index": 451, "timestamp": "2017-02-20T01:15:34Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3eb54db5-b0d6-482f-b1cb-d1dbd2231bf7", "eventTime": "2017-02-20T01:15:34Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b26af24-89e0-4e34-bdb5-bb44f62ae5e9", "record_id": "flaws_cloudtrail:0000452:1b26af24-89e0-4e34-bdb5-bb44f62ae5e9", "row_index": 452, "timestamp": "2017-02-20T01:15:34Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b26af24-89e0-4e34-bdb5-bb44f62ae5e9", "eventTime": "2017-02-20T01:15:34Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1280b580-9e77-4e95-a800-dad7461ebcf1", "record_id": "flaws_cloudtrail:0000453:1280b580-9e77-4e95-a800-dad7461ebcf1", "row_index": 453, "timestamp": "2017-02-20T01:15:34Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1280b580-9e77-4e95-a800-dad7461ebcf1", "eventTime": "2017-02-20T01:15:34Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cca019b3-50f2-46d5-b442-6ebb04ddfa64", "record_id": "flaws_cloudtrail:0000454:cca019b3-50f2-46d5-b442-6ebb04ddfa64", "row_index": 454, "timestamp": "2017-02-20T01:15:34Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cca019b3-50f2-46d5-b442-6ebb04ddfa64", "eventTime": "2017-02-20T01:15:34Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5af287b-6fe4-41d9-84f1-9b072b8db224", "record_id": "flaws_cloudtrail:0000455:f5af287b-6fe4-41d9-84f1-9b072b8db224", "row_index": 455, "timestamp": "2017-02-20T01:15:34Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5af287b-6fe4-41d9-84f1-9b072b8db224", "eventTime": "2017-02-20T01:15:34Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e710509-bf25-4eb2-800b-319ac405d7e0", "record_id": "flaws_cloudtrail:0000456:2e710509-bf25-4eb2-800b-319ac405d7e0", "row_index": 456, "timestamp": "2017-02-20T01:15:34Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e710509-bf25-4eb2-800b-319ac405d7e0", "eventTime": "2017-02-20T01:15:34Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid REST API identifier specified", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "pvlftmiyea", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "454f73f6-f85c-4d27-ad09-b95e087acdb4", "record_id": "flaws_cloudtrail:0000457:454f73f6-f85c-4d27-ad09-b95e087acdb4", "row_index": 457, "timestamp": "2017-02-20T01:15:34Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "454f73f6-f85c-4d27-ad09-b95e087acdb4", "eventTime": "2017-02-20T01:15:34Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c499352d-0dfa-4e37-940c-27ee6b617bf5", "record_id": "flaws_cloudtrail:0000458:c499352d-0dfa-4e37-940c-27ee6b617bf5", "row_index": 458, "timestamp": "2017-02-20T01:15:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c499352d-0dfa-4e37-940c-27ee6b617bf5", "eventTime": "2017-02-20T01:15:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0838d3a-7391-498f-9321-e1e0a5ae82f0", "record_id": "flaws_cloudtrail:0000459:d0838d3a-7391-498f-9321-e1e0a5ae82f0", "row_index": 459, "timestamp": "2017-02-20T01:15:40Z", "event_type": "GetAccountSettings08306", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0838d3a-7391-498f-9321-e1e0a5ae82f0", "eventTime": "2017-02-20T01:15:40Z", "eventName": "GetAccountSettings08306", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"includePreviewFeatures": true}, "responseElements": {"previewFeatures": [], "accountUsage": {"totalCodeSize": 304, "functionCount": 1}, "accountLimit": {"concurrentExecutions": 100, "codeSizeZipped": 52428800, "totalCodeSize": 80530636800, "codeSizeUnzipped": 262144000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cccd7ccf-0aaf-4f39-a201-30b758a5cf21", "record_id": "flaws_cloudtrail:0000460:cccd7ccf-0aaf-4f39-a201-30b758a5cf21", "row_index": 460, "timestamp": "2017-02-20T01:16:21Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDAXOE19562F4G1VVJVC", "user_name": "Level5", "access_key_id": "AKIA3JSUOQCUGDDKXCAI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cccd7ccf-0aaf-4f39-a201-30b758a5cf21", "eventTime": "2017-02-20T01:16:21Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAXOE19562F4G1VVJVC", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIA3JSUOQCUGDDKXCAI", "userName": "Level5"}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90891ff8-5ae4-4aaa-8b5e-ebfaa9d29ae6", "record_id": "flaws_cloudtrail:0000461:90891ff8-5ae4-4aaa-8b5e-ebfaa9d29ae6", "row_index": 461, "timestamp": "2017-02-20T01:16:40Z", "event_type": "ListAliases202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90891ff8-5ae4-4aaa-8b5e-ebfaa9d29ae6", "eventTime": "2017-02-20T01:16:40Z", "eventName": "ListAliases202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"marker": "$DEFAULT", "functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b040ad5d-7afe-4857-9d23-bc212a7901c3", "record_id": "flaws_cloudtrail:0000462:b040ad5d-7afe-4857-9d23-bc212a7901c3", "row_index": 462, "timestamp": "2017-02-20T01:16:40Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b040ad5d-7afe-4857-9d23-bc212a7901c3", "eventTime": "2017-02-20T01:16:40Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"qualifier": "$LATEST", "functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3fae600-b1c5-4b3d-85eb-2f48a155ca4d", "record_id": "flaws_cloudtrail:0000463:b3fae600-b1c5-4b3d-85eb-2f48a155ca4d", "row_index": 463, "timestamp": "2017-02-20T01:16:40Z", "event_type": "ListVersionsByFunction202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3fae600-b1c5-4b3d-85eb-2f48a155ca4d", "eventTime": "2017-02-20T01:16:40Z", "eventName": "ListVersionsByFunction202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63cd0692-3690-4ac5-b9ee-57623136c06e", "record_id": "flaws_cloudtrail:0000464:63cd0692-3690-4ac5-b9ee-57623136c06e", "row_index": 464, "timestamp": "2017-02-20T01:18:30Z", "event_type": "GetAccountSettings08306", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63cd0692-3690-4ac5-b9ee-57623136c06e", "eventTime": "2017-02-20T01:18:30Z", "eventName": "GetAccountSettings08306", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"includePreviewFeatures": true}, "responseElements": {"previewFeatures": [], "accountUsage": {"totalCodeSize": 304, "functionCount": 1}, "accountLimit": {"concurrentExecutions": 100, "codeSizeZipped": 52428800, "totalCodeSize": 80530636800, "codeSizeUnzipped": 262144000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65432a-6351-4bf5-ae27-1fcfb06e6385", "record_id": "flaws_cloudtrail:0000465:65432a-6351-4bf5-ae27-1fcfb06e6385", "row_index": 465, "timestamp": "2017-02-20T01:18:30Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65432a-6351-4bf5-ae27-1fcfb06e6385", "eventTime": "2017-02-20T01:18:30Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd8dbbb9-b9db-4793-aa4b-e6f8ee8860de", "record_id": "flaws_cloudtrail:0000466:cd8dbbb9-b9db-4793-aa4b-e6f8ee8860de", "row_index": 466, "timestamp": "2017-02-20T01:18:35Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd8dbbb9-b9db-4793-aa4b-e6f8ee8860de", "eventTime": "2017-02-20T01:18:35Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"qualifier": "$LATEST", "functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d0205c0-2b37-4125-8456-bf5f66a2a683", "record_id": "flaws_cloudtrail:0000467:7d0205c0-2b37-4125-8456-bf5f66a2a683", "row_index": 467, "timestamp": "2017-02-20T01:18:35Z", "event_type": "ListAliases202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d0205c0-2b37-4125-8456-bf5f66a2a683", "eventTime": "2017-02-20T01:18:35Z", "eventName": "ListAliases202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"marker": "$DEFAULT", "functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa7559e6-1fc4-4f79-86d1-304805b3440af", "record_id": "flaws_cloudtrail:0000468:aa7559e6-1fc4-4f79-86d1-304805b3440af", "row_index": 468, "timestamp": "2017-02-20T01:18:35Z", "event_type": "ListVersionsByFunction202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa7559e6-1fc4-4f79-86d1-304805b3440af", "eventTime": "2017-02-20T01:18:35Z", "eventName": "ListVersionsByFunction202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e655dbee-ec67-44f7-827c-ffb223a480c7", "record_id": "flaws_cloudtrail:0000469:e655dbee-ec67-44f7-827c-ffb223a480c7", "row_index": 469, "timestamp": "2017-02-20T01:18:44Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e655dbee-ec67-44f7-827c-ffb223a480c7", "eventTime": "2017-02-20T01:18:44Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fadd5da-ccf0-4c46-8d35-52d658702fd8", "record_id": "flaws_cloudtrail:0000470:7fadd5da-ccf0-4c46-8d35-52d658702fd8", "row_index": 470, "timestamp": "2017-02-20T01:18:44Z", "event_type": "ListEventSourceMappings202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fadd5da-ccf0-4c46-8d35-52d658702fd8", "eventTime": "2017-02-20T01:18:44Z", "eventName": "ListEventSourceMappings202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7473b680-1d94-4936-946c-d87b879a4b00", "record_id": "flaws_cloudtrail:0000471:7473b680-1d94-4936-946c-d87b879a4b00", "row_index": 471, "timestamp": "2017-02-20T01:18:44Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7473b680-1d94-4936-946c-d87b879a4b00", "eventTime": "2017-02-20T01:18:44Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a057fc7-a5b4-4178-b94c-6f7d9bc7d120", "record_id": "flaws_cloudtrail:0000472:6a057fc7-a5b4-4178-b94c-6f7d9bc7d120", "row_index": 472, "timestamp": "2017-02-20T01:18:44Z", "event_type": "ListEventSourceMappings202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a057fc7-a5b4-4178-b94c-6f7d9bc7d120", "eventTime": "2017-02-20T01:18:44Z", "eventName": "ListEventSourceMappings202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1782ef56-f3e4-4793-8724-c22ae6554ffa", "record_id": "flaws_cloudtrail:0000473:1782ef56-f3e4-4793-8724-c22ae6554ffa", "row_index": 473, "timestamp": "2017-02-20T01:18:44Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1782ef56-f3e4-4793-8724-c22ae6554ffa", "eventTime": "2017-02-20T01:18:44Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df395acc-3eae-4189-9342-5d9e2d092001", "record_id": "flaws_cloudtrail:0000474:df395acc-3eae-4189-9342-5d9e2d092001", "row_index": 474, "timestamp": "2017-02-20T01:18:44Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df395acc-3eae-4189-9342-5d9e2d092001", "eventTime": "2017-02-20T01:18:44Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c2e082d-bba6-4d7f-9d84-81cb36f83db6", "record_id": "flaws_cloudtrail:0000475:4c2e082d-bba6-4d7f-9d84-81cb36f83db6", "row_index": 475, "timestamp": "2017-02-20T01:18:44Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c2e082d-bba6-4d7f-9d84-81cb36f83db6", "eventTime": "2017-02-20T01:18:44Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid REST API identifier specified", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "pvlftmiyea", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74457f7-87d5-4ff5-8b19-b04cf37303e", "record_id": "flaws_cloudtrail:0000476:74457f7-87d5-4ff5-8b19-b04cf37303e", "row_index": 476, "timestamp": "2017-02-20T01:18:44Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74457f7-87d5-4ff5-8b19-b04cf37303e", "eventTime": "2017-02-20T01:18:44Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9228c809-2c88-40a2-9563-3b97f649ae3b", "record_id": "flaws_cloudtrail:0000477:9228c809-2c88-40a2-9563-3b97f649ae3b", "row_index": 477, "timestamp": "2017-02-20T01:18:44Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9228c809-2c88-40a2-9563-3b97f649ae3b", "eventTime": "2017-02-20T01:18:44Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a33f2975-6dad-4fd2-ab4b-614739640263", "record_id": "flaws_cloudtrail:0000478:a33f2975-6dad-4fd2-ab4b-614739640263", "row_index": 478, "timestamp": "2017-02-20T01:18:44Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a33f2975-6dad-4fd2-ab4b-614739640263", "eventTime": "2017-02-20T01:18:44Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "409eac5e-1eba-4844-bbcb-dd4f91a1ce9f", "record_id": "flaws_cloudtrail:0000479:409eac5e-1eba-4844-bbcb-dd4f91a1ce9f", "row_index": 479, "timestamp": "2017-02-20T01:18:44Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "409eac5e-1eba-4844-bbcb-dd4f91a1ce9f", "eventTime": "2017-02-20T01:18:44Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8460ae91-d293-46c0-9a11-95ec21fb7ef1", "record_id": "flaws_cloudtrail:0000480:8460ae91-d293-46c0-9a11-95ec21fb7ef1", "row_index": 480, "timestamp": "2017-02-20T01:18:44Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8460ae91-d293-46c0-9a11-95ec21fb7ef1", "eventTime": "2017-02-20T01:18:44Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "532af537-b509-4869-929a-58ab0167f17f", "record_id": "flaws_cloudtrail:0000481:532af537-b509-4869-929a-58ab0167f17f", "row_index": 481, "timestamp": "2017-02-20T01:18:44Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "532af537-b509-4869-929a-58ab0167f17f", "eventTime": "2017-02-20T01:18:44Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d181703fb-a057-48cd-a666-1e27e20f70b9", "record_id": "flaws_cloudtrail:0000482:d181703fb-a057-48cd-a666-1e27e20f70b9", "row_index": 482, "timestamp": "2017-02-20T01:18:44Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d181703fb-a057-48cd-a666-1e27e20f70b9", "eventTime": "2017-02-20T01:18:44Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c091da97-2255-4cf8-835e-55cb59f5ada2", "record_id": "flaws_cloudtrail:0000483:c091da97-2255-4cf8-835e-55cb59f5ada2", "row_index": 483, "timestamp": "2017-02-20T01:18:55Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c091da97-2255-4cf8-835e-55cb59f5ada2", "eventTime": "2017-02-20T01:18:55Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de8c881f-8829-4513-ad83-4b77766c7e", "record_id": "flaws_cloudtrail:0000484:de8c881f-8829-4513-ad83-4b77766c7e", "row_index": 484, "timestamp": "2017-02-20T01:18:55Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de8c881f-8829-4513-ad83-4b77766c7e", "eventTime": "2017-02-20T01:18:55Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid REST API identifier specified", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "LambdaMicroservice", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90fa307c-7d42-44d5-8b39-2a38c7068b90", "record_id": "flaws_cloudtrail:0000485:90fa307c-7d42-44d5-8b39-2a38c7068b90", "row_index": 485, "timestamp": "2017-02-20T01:19:10Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90fa307c-7d42-44d5-8b39-2a38c7068b90", "eventTime": "2017-02-20T01:19:10Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid REST API identifier specified", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "LambdaMicroservice", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4dca2d1-b3ed-47f5-98be-ef3c2e950d45", "record_id": "flaws_cloudtrail:0000486:e4dca2d1-b3ed-47f5-98be-ef3c2e950d45", "row_index": 486, "timestamp": "2017-02-20T01:19:11Z", "event_type": "PutIntegrationResponse", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1304, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4dca2d1-b3ed-47f5-98be-ef3c2e950d45", "eventTime": "2017-02-20T01:19:11Z", "eventName": "PutIntegrationResponse", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"httpMethod": "ANY", "resourceId": "9vrjb0", "statusCode": "200", "putIntegrationResponseInput": {"selectionPattern": ".*"}, "restApiId": "1ga7h020z2", "template": false}, "responseElements": {"selectionPattern": ".*", "integrationresponseUpdate": {"httpMethod": "ANY", "resourceId": "9vrjb0", "restApiId": "1ga7h020z2", "statusCode": "200", "template": false}, "integrationresponseDelete": {"httpMethod": "ANY", "resourceId": "9vrjb0", "restApiId": "1ga7h020z2", "statusCode": "200", "template": false}, "statusCode": "200", "self": {"restApiId": "1ga7h020z2", "httpMethod": "ANY", "resourceId": "9vrjb0", "statusCode": "200", "template": false, "title": "200"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "525650-73b7-4ac1-8383-803a4fe3e023", "record_id": "flaws_cloudtrail:0000487:525650-73b7-4ac1-8383-803a4fe3e023", "row_index": 487, "timestamp": "2017-02-20T01:19:11Z", "event_type": "CreateRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 2701, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "525650-73b7-4ac1-8383-803a4fe3e023", "eventTime": "2017-02-20T01:19:11Z", "eventName": "CreateRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"createRestApiInput": {"name": "LambdaMicroservice", "description": "Created by AWS Lambda"}, "template": false}, "responseElements": {"modelCreate": {"restApiId": "1ga7h020z2", "template": false}, "documentationpartById": {"restApiId": "1ga7h020z2", "template": true}, "restapiDeployments": {"restApiId": "1ga7h020z2", "template": true, "templateSkipList": ["position"]}, "restapiResources": {"restApiId": "1ga7h020z2", "template": true, "templateSkipList": ["position"]}, "restapiModels": {"restApiId": "1ga7h020z2", "template": false}, "documentationversionCreate": {"restApiId": "1ga7h020z2", "template": false}, "restapiAuthorizers": {"restApiId": "1ga7h020z2", "template": false}, "deploymentCreate": {"restApiId": "1ga7h020z2", "template": false}, "createdDate": "Feb 20, 2017 1:19:11 AM", "authorizerById": {"restApiId": "1ga7h020z2", "template": true}, "resourceById": {"restApiId": "1ga7h020z2", "template": true}, "resourceCreate": {"parentId": "li1zyku7h7", "restApiId": "1ga7h020z2", "template": false}, "documentationpartImport": {"restApiId": "1ga7h020z2", "failOnWarnings": false, "template": true}, "id": "1ga7h020z2", "documentationversionByVersion": {"restApiId": "1ga7h020z2", "template": true}, "documentationpartCreate": {"restApiId": "1ga7h020z2", "template": false}, "restapiDocumentationParts": {"restApiId": "1ga7h020z2", "template": false}, "name": "LambdaMicroservice", "restapiStages": {"restApiId": "1ga7h020z2", "template": true, "templateSkipList": ["position"]}, "deploymentById": {"restApiId": "1ga7h020z2", "template": true, "templateSkipList": ["position"]}, "self": {"restApiId": "1ga7h020z2", "template": false}, "restapiDocumentationVersions": {"restApiId": "1ga7h020z2", "template": false}, "stageCreate": {"restApiId": "1ga7h020z2", "template": false}, "restapiDelete": {"restApiId": "1ga7h020z2", "template": false}, "authorizerCreate": {"restApiId": "1ga7h020z2", "template": false}, "modelByName": {"flatten": false, "restApiId": "1ga7h020z2", "template": true}, "stageByName": {"restApiId": "1ga7h020z2", "template": true}, "restapiUpdate": {"restApiId": "1ga7h020z2", "template": false}, "description": "Created by AWS Lambda"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "201db910-4861-41a6-8ec9-e44cfcb6a87e", "record_id": "flaws_cloudtrail:0000488:201db910-4861-41a6-8ec9-e44cfcb6a87e", "row_index": 488, "timestamp": "2017-02-20T01:19:11Z", "event_type": "PutMethodResponse", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "201db910-4861-41a6-8ec9-e44cfcb6a87e", "eventTime": "2017-02-20T01:19:11Z", "eventName": "PutMethodResponse", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "1ga7h020z2", "httpMethod": "ANY", "statusCode": "200", "resourceId": "9vrjb0", "putMethodResponseInput": {"responseModels": {}}, "template": false}, "responseElements": {"methodresponseDelete": {"httpMethod": "ANY", "restApiId": "1ga7h020z2", "statusCode": "200", "resourceId": "9vrjb0", "template": false}, "statusCode": "200", "methodresponseUpdate": {"httpMethod": "ANY", "statusCode": "200", "restApiId": "1ga7h020z2", "resourceId": "9vrjb0", "template": false}, "responseModels": {}, "self": {"restApiId": "1ga7h020z2", "httpMethod": "ANY", "resourceId": "9vrjb0", "statusCode": "200", "template": false, "title": "200"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95b8f426-a924-4fb5-82e6-a0ecd857e417", "record_id": "flaws_cloudtrail:0000489:95b8f426-a924-4fb5-82e6-a0ecd857e417", "row_index": 489, "timestamp": "2017-02-20T01:19:11Z", "event_type": "PutMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1453, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95b8f426-a924-4fb5-82e6-a0ecd857e417", "eventTime": "2017-02-20T01:19:11Z", "eventName": "PutMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "1ga7h020z2", "putMethodInput": {"apiKeyRequired": false, "authorizationType": "AWS_IAM"}, "httpMethod": "ANY", "resourceId": "9vrjb0", "template": false}, "responseElements": {"httpMethod": "ANY", "apiKeyRequired": false, "methodDelete": {"resourceId": "9vrjb0", "httpMethod": "ANY", "restApiId": "1ga7h020z2", "template": false}, "methodresponsePut": {"restApiId": "1ga7h020z2", "httpMethod": "ANY", "resourceId": "9vrjb0", "template": true}, "methodUpdate": {"httpMethod": "ANY", "resourceId": "9vrjb0", "restApiId": "1ga7h020z2", "template": false}, "authorizationType": "AWS_IAM", "integrationPut": {"resourceId": "9vrjb0", "httpMethod": "ANY", "restApiId": "1ga7h020z2", "template": false}, "self": {"resourceId": "9vrjb0", "httpMethod": "ANY", "restApiId": "1ga7h020z2", "template": false, "name": "ANY", "title": "ANY"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b1a5e11-8c2d-4986-86b3-534566746868", "record_id": "flaws_cloudtrail:0000490:8b1a5e11-8c2d-4986-86b3-534566746868", "row_index": 490, "timestamp": "2017-02-20T01:19:11Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 872, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b1a5e11-8c2d-4986-86b3-534566746868", "eventTime": "2017-02-20T01:19:11Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid Method identifier specified", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"resourceId": "9vrjb0", "httpMethod": "ANY", "restApiId": "1ga7h020z2", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0c7debe-9694-494d-a5cd-296463287258", "record_id": "flaws_cloudtrail:0000491:d0c7debe-9694-494d-a5cd-296463287258", "row_index": 491, "timestamp": "2017-02-20T01:19:11Z", "event_type": "GetMethodResponse", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 902, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0c7debe-9694-494d-a5cd-296463287258", "eventTime": "2017-02-20T01:19:11Z", "eventName": "GetMethodResponse", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid Response status code specified", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "1ga7h020z2", "httpMethod": "ANY", "resourceId": "9vrjb0", "statusCode": "200", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7de55f2c-ebde-42a2-98e5-6d107f21ff0b", "record_id": "flaws_cloudtrail:0000492:7de55f2c-ebde-42a2-98e5-6d107f21ff0b", "row_index": 492, "timestamp": "2017-02-20T01:19:11Z", "event_type": "PutIntegration", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1663, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7de55f2c-ebde-42a2-98e5-6d107f21ff0b", "eventTime": "2017-02-20T01:19:11Z", "eventName": "PutIntegration", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"resourceId": "9vrjb0", "httpMethod": "ANY", "putIntegrationInput": {"httpMethod": "POST", "type": "AWS_PROXY", "uri": "arn:aws:apigateway:us-west-2:lambda:path/2015-03-31/functions/arn:aws:lambda:us-west-2:811596193553:function:level5/invocations"}, "restApiId": "1ga7h020z2", "template": false}, "responseElements": {"integrationresponsePut": {"httpMethod": "ANY", "resourceId": "9vrjb0", "restApiId": "1ga7h020z2", "template": true}, "uri": "arn:aws:apigateway:us-west-2:lambda:path/2015-03-31/functions/arn:aws:lambda:us-west-2:811596193553:function:level5/invocations", "httpMethod": "POST", "cacheNamespace": "9vrjb0", "passthroughBehavior": "WHEN_NO_MATCH", "self": {"restApiId": "1ga7h020z2", "httpMethod": "ANY", "resourceId": "9vrjb0", "template": false}, "integrationDelete": {"restApiId": "1ga7h020z2", "httpMethod": "ANY", "resourceId": "9vrjb0", "template": false}, "type": "AWS_PROXY", "integrationUpdate": {"restApiId": "1ga7h020z2", "resourceId": "9vrjb0", "httpMethod": "ANY", "template": false}, "cacheKeyParameters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "073cda43-ea28-4aea-9da7-07bb77b0a19b", "record_id": "flaws_cloudtrail:0000493:073cda43-ea28-4aea-9da7-07bb77b0a19b", "row_index": 493, "timestamp": "2017-02-20T01:19:11Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "073cda43-ea28-4aea-9da7-07bb77b0a19b", "eventTime": "2017-02-20T01:19:11Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "1ga7h020z2", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "361cf241-fb6b-4166-9a22-ab896ba1a0de", "record_id": "flaws_cloudtrail:0000494:361cf241-fb6b-4166-9a22-ab896ba1a0de", "row_index": 494, "timestamp": "2017-02-20T01:19:11Z", "event_type": "CreateDeployment", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1338, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "361cf241-fb6b-4166-9a22-ab896ba1a0de", "eventTime": "2017-02-20T01:19:11Z", "eventName": "CreateDeployment", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "1ga7h020z2", "createDeploymentInput": {"description": "Deployed by AWS Lambda", "stageDescription": "Created by AWS Lambda", "stageName": "prod"}, "template": false}, "responseElements": {"id": "ka9qkb", "createdDate": "Feb 20, 2017 1:19:11 AM", "description": "Deployed by AWS Lambda", "deploymentUpdate": {"restApiId": "1ga7h020z2", "deploymentId": "ka9qkb", "template": false}, "deploymentStages": {"deploymentId": "ka9qkb", "restApiId": "1ga7h020z2", "template": false, "templateSkipList": ["position"]}, "deploymentDelete": {"deploymentId": "ka9qkb", "restApiId": "1ga7h020z2", "template": false}, "self": {"deploymentId": "ka9qkb", "restApiId": "1ga7h020z2", "template": false}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc326e74-13b0-444d-b6a3-a74868cf5", "record_id": "flaws_cloudtrail:0000495:fc326e74-13b0-444d-b6a3-a74868cf5", "row_index": 495, "timestamp": "2017-02-20T01:19:11Z", "event_type": "GetIntegration", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 872, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc326e74-13b0-444d-b6a3-a74868cf5", "eventTime": "2017-02-20T01:19:11Z", "eventName": "GetIntegration", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "No integration defined for method", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "1ga7h020z2", "httpMethod": "ANY", "resourceId": "9vrjb0", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fef439b-e73e-4234-9a2d-3372d12a1b34", "record_id": "flaws_cloudtrail:0000496:1fef439b-e73e-4234-9a2d-3372d12a1b34", "row_index": 496, "timestamp": "2017-02-20T01:19:11Z", "event_type": "CreateResource", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1378, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fef439b-e73e-4234-9a2d-3372d12a1b34", "eventTime": "2017-02-20T01:19:11Z", "eventName": "CreateResource", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"parentId": "li1zyku7h7", "restApiId": "1ga7h020z2", "createResourceInput": {"pathPart": "level5"}, "template": false}, "responseElements": {"parentId": "li1zyku7h7", "methodPut": {"restApiId": "1ga7h020z2", "resourceId": "9vrjb0", "template": true}, "path": "/level5", "id": "9vrjb0", "resourceUpdate": {"restApiId": "1ga7h020z2", "resourceId": "9vrjb0", "template": false}, "methodByHttpMethod": {"resourceId": "9vrjb0", "restApiId": "1ga7h020z2", "template": true}, "self": {"restApiId": "1ga7h020z2", "resourceId": "9vrjb0", "template": false}, "resourceDelete": {"restApiId": "1ga7h020z2", "resourceId": "9vrjb0", "template": false}, "resourceCreateChild": {"parentId": "9vrjb0", "restApiId": "1ga7h020z2", "template": false}, "pathPart": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccda7189-9d16-4f64-8473-351d814bc811", "record_id": "flaws_cloudtrail:0000497:ccda7189-9d16-4f64-8473-351d814bc811", "row_index": 497, "timestamp": "2017-02-20T01:19:11Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccda7189-9d16-4f64-8473-351d814bc811", "eventTime": "2017-02-20T01:19:11Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"functionName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0584dfbb-5226-4c2b-8db0-91a673236b82", "record_id": "flaws_cloudtrail:0000498:0584dfbb-5226-4c2b-8db0-91a673236b82", "row_index": 498, "timestamp": "2017-02-20T01:19:23Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0584dfbb-5226-4c2b-8db0-91a673236b82", "eventTime": "2017-02-20T01:19:23Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58e39fe2-3d18-426a-ab94-a0fec5d9a4ce", "record_id": "flaws_cloudtrail:0000499:58e39fe2-3d18-426a-ab94-a0fec5d9a4ce", "row_index": 499, "timestamp": "2017-02-20T01:19:25Z", "event_type": "GetIntegration", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58e39fe2-3d18-426a-ab94-a0fec5d9a4ce", "eventTime": "2017-02-20T01:19:25Z", "eventName": "GetIntegration", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "No integration defined for method", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "httpMethod": "ANY", "resourceId": "9bhbfa", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "170bb617-09fc-4bca-8f1a-f719f6f7463c", "record_id": "flaws_cloudtrail:0000500:170bb617-09fc-4bca-8f1a-f719f6f7463c", "row_index": 500, "timestamp": "2017-02-20T01:19:25Z", "event_type": "PutMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1453, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "170bb617-09fc-4bca-8f1a-f719f6f7463c", "eventTime": "2017-02-20T01:19:25Z", "eventName": "PutMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "putMethodInput": {"apiKeyRequired": false, "authorizationType": "AWS_IAM"}, "httpMethod": "ANY", "resourceId": "9bhbfa", "template": false}, "responseElements": {"httpMethod": "ANY", "apiKeyRequired": false, "methodDelete": {"resourceId": "9bhbfa", "httpMethod": "ANY", "restApiId": "puspzvwgb6", "template": false}, "methodresponsePut": {"restApiId": "puspzvwgb6", "httpMethod": "ANY", "resourceId": "9bhbfa", "template": true}, "methodUpdate": {"httpMethod": "ANY", "resourceId": "9bhbfa", "restApiId": "puspzvwgb6", "template": false}, "authorizationType": "AWS_IAM", "integrationPut": {"resourceId": "9bhbfa", "httpMethod": "ANY", "restApiId": "puspzvwgb6", "template": false}, "self": {"resourceId": "9bhbfa", "httpMethod": "ANY", "restApiId": "puspzvwgb6", "template": false, "name": "ANY", "title": "ANY"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ffdd49d-bd84-4c66-a1c1-4bc4b669603", "record_id": "flaws_cloudtrail:0000501:3ffdd49d-bd84-4c66-a1c1-4bc4b669603", "row_index": 501, "timestamp": "2017-02-20T01:19:25Z", "event_type": "GetMethod", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ffdd49d-bd84-4c66-a1c1-4bc4b669603", "eventTime": "2017-02-20T01:19:25Z", "eventName": "GetMethod", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid Method identifier specified", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"resourceId": "9bhbfa", "httpMethod": "ANY", "restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "085a52f4-f03c-4aaa-adb7-d413855d7c612", "record_id": "flaws_cloudtrail:0000502:085a52f4-f03c-4aaa-adb7-d413855d7c612", "row_index": 502, "timestamp": "2017-02-20T01:19:25Z", "event_type": "PutMethodResponse", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "085a52f4-f03c-4aaa-adb7-d413855d7c612", "eventTime": "2017-02-20T01:19:25Z", "eventName": "PutMethodResponse", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "httpMethod": "ANY", "statusCode": "200", "resourceId": "9bhbfa", "putMethodResponseInput": {"responseModels": {}}, "template": false}, "responseElements": {"methodresponseDelete": {"httpMethod": "ANY", "restApiId": "puspzvwgb6", "statusCode": "200", "resourceId": "9bhbfa", "template": false}, "statusCode": "200", "methodresponseUpdate": {"httpMethod": "ANY", "statusCode": "200", "restApiId": "puspzvwgb6", "resourceId": "9bhbfa", "template": false}, "responseModels": {}, "self": {"restApiId": "puspzvwgb6", "httpMethod": "ANY", "resourceId": "9bhbfa", "statusCode": "200", "template": false, "title": "200"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab705ab8-2cfd-4e53-b016-9047fcaf0a59", "record_id": "flaws_cloudtrail:0000503:ab705ab8-2cfd-4e53-b016-9047fcaf0a59", "row_index": 503, "timestamp": "2017-02-20T01:19:25Z", "event_type": "CreateResource", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1380, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab705ab8-2cfd-4e53-b016-9047fcaf0a59", "eventTime": "2017-02-20T01:19:25Z", "eventName": "CreateResource", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"parentId": "kamzugakt0", "restApiId": "puspzvwgb6", "createResourceInput": {"pathPart": "level5"}, "template": false}, "responseElements": {"parentId": "kamzugakt0", "methodPut": {"restApiId": "puspzvwgb6", "resourceId": "9bhbfa", "template": true}, "path": "/level5", "id": "9bhbfa", "resourceUpdate": {"restApiId": "puspzvwgb6", "resourceId": "9bhbfa", "template": false}, "methodByHttpMethod": {"resourceId": "9bhbfa", "restApiId": "puspzvwgb6", "template": true}, "self": {"restApiId": "puspzvwgb6", "resourceId": "9bhbfa", "template": false}, "resourceDelete": {"restApiId": "puspzvwgb6", "resourceId": "9bhbfa", "template": false}, "resourceCreateChild": {"parentId": "9bhbfa", "restApiId": "puspzvwgb6", "template": false}, "pathPart": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4749e439-505a-47a1-9260-2c6ea188aa3c", "record_id": "flaws_cloudtrail:0000504:4749e439-505a-47a1-9260-2c6ea188aa3c", "row_index": 504, "timestamp": "2017-02-20T01:19:25Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4749e439-505a-47a1-9260-2c6ea188aa3c", "eventTime": "2017-02-20T01:19:25Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b90a813a-dce3-45ff-b775-6581fda33739", "record_id": "flaws_cloudtrail:0000505:b90a813a-dce3-45ff-b775-6581fda33739", "row_index": 505, "timestamp": "2017-02-20T01:19:25Z", "event_type": "PutIntegration", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1661, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b90a813a-dce3-45ff-b775-6581fda33739", "eventTime": "2017-02-20T01:19:25Z", "eventName": "PutIntegration", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"resourceId": "9bhbfa", "httpMethod": "ANY", "putIntegrationInput": {"httpMethod": "POST", "type": "AWS_PROXY", "uri": "arn:aws:apigateway:us-west-2:lambda:path/2015-03-31/functions/arn:aws:lambda:us-west-2:811596193553:function:level5/invocations"}, "restApiId": "puspzvwgb6", "template": false}, "responseElements": {"integrationresponsePut": {"httpMethod": "ANY", "resourceId": "9bhbfa", "restApiId": "puspzvwgb6", "template": true}, "uri": "arn:aws:apigateway:us-west-2:lambda:path/2015-03-31/functions/arn:aws:lambda:us-west-2:811596193553:function:level5/invocations", "httpMethod": "POST", "cacheNamespace": "9bhbfa", "passthroughBehavior": "WHEN_NO_MATCH", "self": {"restApiId": "puspzvwgb6", "httpMethod": "ANY", "resourceId": "9bhbfa", "template": false}, "integrationDelete": {"restApiId": "puspzvwgb6", "httpMethod": "ANY", "resourceId": "9bhbfa", "template": false}, "type": "AWS_PROXY", "integrationUpdate": {"restApiId": "puspzvwgb6", "resourceId": "9bhbfa", "httpMethod": "ANY", "template": false}, "cacheKeyParameters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67f89765-68ef-47dc-8614-ed50b12ae2d5", "record_id": "flaws_cloudtrail:0000506:67f89765-68ef-47dc-8614-ed50b12ae2d5", "row_index": 506, "timestamp": "2017-02-20T01:19:25Z", "event_type": "PutIntegrationResponse", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1305, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67f89765-68ef-47dc-8614-ed50b12ae2d5", "eventTime": "2017-02-20T01:19:25Z", "eventName": "PutIntegrationResponse", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"httpMethod": "ANY", "resourceId": "9bhbfa", "statusCode": "200", "putIntegrationResponseInput": {"selectionPattern": ".*"}, "restApiId": "puspzvwgb6", "template": false}, "responseElements": {"selectionPattern": ".*", "integrationresponseUpdate": {"httpMethod": "ANY", "resourceId": "9bhbfa", "restApiId": "puspzvwgb6", "statusCode": "200", "template": false}, "integrationresponseDelete": {"httpMethod": "ANY", "resourceId": "9bhbfa", "restApiId": "puspzvwgb6", "statusCode": "200", "template": false}, "statusCode": "200", "self": {"restApiId": "puspzvwgb6", "httpMethod": "ANY", "resourceId": "9bhbfa", "statusCode": "200", "template": false, "title": "200"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cb99ed1-4997-4af5-9873-cad58e243d5c", "record_id": "flaws_cloudtrail:0000507:6cb99ed1-4997-4af5-9873-cad58e243d5c", "row_index": 507, "timestamp": "2017-02-20T01:19:25Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cb99ed1-4997-4af5-9873-cad58e243d5c", "eventTime": "2017-02-20T01:19:25Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33cfbf80-d6cd-4a4c-8dab-87fb36b78289", "record_id": "flaws_cloudtrail:0000508:33cfbf80-d6cd-4a4c-8dab-87fb36b78289", "row_index": 508, "timestamp": "2017-02-20T01:19:25Z", "event_type": "GetMethodResponse", "event_source": "apigateway.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33cfbf80-d6cd-4a4c-8dab-87fb36b78289", "eventTime": "2017-02-20T01:19:25Z", "eventName": "GetMethodResponse", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid Response status code specified", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"restApiId": "puspzvwgb6", "httpMethod": "ANY", "resourceId": "9bhbfa", "statusCode": "200", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae5dc1fd-b79e-4daa-b93d-de065be49ed2", "record_id": "flaws_cloudtrail:0000509:ae5dc1fd-b79e-4daa-b93d-de065be49ed2", "row_index": 509, "timestamp": "2017-02-20T01:19:38Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[AWS Console Lambda, aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 634, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae5dc1fd-b79e-4daa-b93d-de065be49ed2", "eventTime": "2017-02-20T01:19:38Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[AWS Console Lambda, aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a5b626f-be86-417f-99a6-f7b8d4c372ba", "record_id": "flaws_cloudtrail:0000510:3a5b626f-be86-417f-99a6-f7b8d4c372ba", "row_index": 510, "timestamp": "2017-02-20T01:20:07Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a5b626f-be86-417f-99a6-f7b8d4c372ba", "eventTime": "2017-02-20T01:20:07Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edb48ccc-e248-4a0a-ac24-9385ba194b13", "record_id": "flaws_cloudtrail:0000511:edb48ccc-e248-4a0a-ac24-9385ba194b13", "row_index": 511, "timestamp": "2017-02-20T01:20:49Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edb48ccc-e248-4a0a-ac24-9385ba194b13", "eventTime": "2017-02-20T01:20:49Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94ea50c1-8e02-44a1-8ac1-c6b5cdf03b89", "record_id": "flaws_cloudtrail:0000512:94ea50c1-8e02-44a1-8ac1-c6b5cdf03b89", "row_index": 512, "timestamp": "2017-02-20T01:20:49Z", "event_type": "ListAliases", "event_source": "kms.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94ea50c1-8e02-44a1-8ac1-c6b5cdf03b89", "eventTime": "2017-02-20T01:20:49Z", "eventName": "ListAliases", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a69645e5-7de0-42fd-a566-3487a46a8471", "record_id": "flaws_cloudtrail:0000513:a69645e5-7de0-42fd-a566-3487a46a8471", "row_index": 513, "timestamp": "2017-02-20T01:20:49Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a69645e5-7de0-42fd-a566-3487a46a8471", "eventTime": "2017-02-20T01:20:49Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbf749f8-a513-4f32-bdd5-d4017a8e9830", "record_id": "flaws_cloudtrail:0000514:cbf749f8-a513-4f32-bdd5-d4017a8e9830", "row_index": 514, "timestamp": "2017-02-20T01:22:47Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbf749f8-a513-4f32-bdd5-d4017a8e9830", "eventTime": "2017-02-20T01:22:47Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c99bb26b-1bba-43eb-b599-07b407f3b311", "record_id": "flaws_cloudtrail:0000515:c99bb26b-1bba-43eb-b599-07b407f3b311", "row_index": 515, "timestamp": "2017-02-20T01:22:47Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c99bb26b-1bba-43eb-b599-07b407f3b311", "eventTime": "2017-02-20T01:22:47Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6563a9bf-07d2-44c4-9482-683730c1603f8", "record_id": "flaws_cloudtrail:0000516:6563a9bf-07d2-44c4-9482-683730c1603f8", "row_index": 516, "timestamp": "2017-02-20T01:22:47Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6563a9bf-07d2-44c4-9482-683730c1603f8", "eventTime": "2017-02-20T01:22:47Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e1c0c13-034c-4192-b192-52e3350bdcec", "record_id": "flaws_cloudtrail:0000517:3e1c0c13-034c-4192-b192-52e3350bdcec", "row_index": 517, "timestamp": "2017-02-20T01:22:47Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e1c0c13-034c-4192-b192-52e3350bdcec", "eventTime": "2017-02-20T01:22:47Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fd106c3-7aba-4ff8-99bd-71c1f0a6a422", "record_id": "flaws_cloudtrail:0000518:1fd106c3-7aba-4ff8-99bd-71c1f0a6a422", "row_index": 518, "timestamp": "2017-02-20T01:22:47Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fd106c3-7aba-4ff8-99bd-71c1f0a6a422", "eventTime": "2017-02-20T01:22:47Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1481ddd6-3870-4943-9d58-554d3c114400", "record_id": "flaws_cloudtrail:0000519:1481ddd6-3870-4943-9d58-554d3c114400", "row_index": 519, "timestamp": "2017-02-20T01:22:48Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1481ddd6-3870-4943-9d58-554d3c114400", "eventTime": "2017-02-20T01:22:48Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "729c928b-a58e-4f2e-b887-10d1cde2587c", "record_id": "flaws_cloudtrail:0000520:729c928b-a58e-4f2e-b887-10d1cde2587c", "row_index": 520, "timestamp": "2017-02-20T01:22:48Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "729c928b-a58e-4f2e-b887-10d1cde2587c", "eventTime": "2017-02-20T01:22:48Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e79c8ab-c456-4597-ac8a-e73279a10532", "record_id": "flaws_cloudtrail:0000521:1e79c8ab-c456-4597-ac8a-e73279a10532", "row_index": 521, "timestamp": "2017-02-20T01:22:48Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e79c8ab-c456-4597-ac8a-e73279a10532", "eventTime": "2017-02-20T01:22:48Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "549415e-2e21-4bda-a07d-b8129dc88884", "record_id": "flaws_cloudtrail:0000522:549415e-2e21-4bda-a07d-b8129dc88884", "row_index": 522, "timestamp": "2017-02-20T01:22:48Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "549415e-2e21-4bda-a07d-b8129dc88884", "eventTime": "2017-02-20T01:22:48Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "966033e8-d7bf-47c8-9377-7717da7dbd41", "record_id": "flaws_cloudtrail:0000523:966033e8-d7bf-47c8-9377-7717da7dbd41", "row_index": 523, "timestamp": "2017-02-20T01:22:48Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "966033e8-d7bf-47c8-9377-7717da7dbd41", "eventTime": "2017-02-20T01:22:48Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b435b828-53a6-47f6-8b04-a2a80e8494f2", "record_id": "flaws_cloudtrail:0000524:b435b828-53a6-47f6-8b04-a2a80e8494f2", "row_index": 524, "timestamp": "2017-02-20T01:22:54Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b435b828-53a6-47f6-8b04-a2a80e8494f2", "eventTime": "2017-02-20T01:22:54Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "230454a28-ea96-4adc-9c15-8b8cc79cbfba", "record_id": "flaws_cloudtrail:0000525:230454a28-ea96-4adc-9c15-8b8cc79cbfba", "row_index": 525, "timestamp": "2017-02-20T01:23:10Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "230454a28-ea96-4adc-9c15-8b8cc79cbfba", "eventTime": "2017-02-20T01:23:10Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e3e570e-d847-4f49-8051-ccdc4bd52b8d", "record_id": "flaws_cloudtrail:0000526:0e3e570e-d847-4f49-8051-ccdc4bd52b8d", "row_index": 526, "timestamp": "2017-02-20T01:23:10Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e3e570e-d847-4f49-8051-ccdc4bd52b8d", "eventTime": "2017-02-20T01:23:10Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5", "maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0269d4c4-fdc9-4e38-9a0c-66e347397910", "record_id": "flaws_cloudtrail:0000527:0269d4c4-fdc9-4e38-9a0c-66e347397910", "row_index": 527, "timestamp": "2017-02-20T01:23:10Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0269d4c4-fdc9-4e38-9a0c-66e347397910", "eventTime": "2017-02-20T01:23:10Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "caf5bf96-4d0d-490b-a737-e8cbc982007a5", "record_id": "flaws_cloudtrail:0000528:caf5bf96-4d0d-490b-a737-e8cbc982007a5", "row_index": 528, "timestamp": "2017-02-20T01:23:10Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "caf5bf96-4d0d-490b-a737-e8cbc982007a5", "eventTime": "2017-02-20T01:23:10Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dd882b8-f25e-40cd-a3c5-7e124286d3a", "record_id": "flaws_cloudtrail:0000529:0dd882b8-f25e-40cd-a3c5-7e124286d3a", "row_index": 529, "timestamp": "2017-02-20T01:23:10Z", "event_type": "ListSSHPublicKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dd882b8-f25e-40cd-a3c5-7e124286d3a", "eventTime": "2017-02-20T01:23:10Z", "eventName": "ListSSHPublicKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5"}, "responseElements": {"sSHPublicKeys": [], "isTruncated": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1531bc87-b040-4985-a30d-a236e7440ab9", "record_id": "flaws_cloudtrail:0000530:1531bc87-b040-4985-a30d-a236e7440ab9", "row_index": 530, "timestamp": "2017-02-20T01:23:10Z", "event_type": "DeleteUser", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1531bc87-b040-4985-a30d-a236e7440ab9", "eventTime": "2017-02-20T01:23:10Z", "eventName": "DeleteUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ce00863-607b-4d79-9c49-802620e45255", "record_id": "flaws_cloudtrail:0000531:5ce00863-607b-4d79-9c49-802620e45255", "row_index": 531, "timestamp": "2017-02-20T01:23:10Z", "event_type": "DetachUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ce00863-607b-4d79-9c49-802620e45255", "eventTime": "2017-02-20T01:23:10Z", "eventName": "DetachUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f5df90e-ce92-40e3-8194-95513e212c", "record_id": "flaws_cloudtrail:0000532:5f5df90e-ce92-40e3-8194-95513e212c", "row_index": 532, "timestamp": "2017-02-20T01:23:10Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f5df90e-ce92-40e3-8194-95513e212c", "eventTime": "2017-02-20T01:23:10Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e892ded-e3c0-4a1b-a82d-179472a82789", "record_id": "flaws_cloudtrail:0000533:4e892ded-e3c0-4a1b-a82d-179472a82789", "row_index": 533, "timestamp": "2017-02-20T01:23:10Z", "event_type": "DeleteLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e892ded-e3c0-4a1b-a82d-179472a82789", "eventTime": "2017-02-20T01:23:10Z", "eventName": "DeleteLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Cannot find Login Profile for User Level5", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1eac38c-1e93-4862-86e7-3387a1b739997", "record_id": "flaws_cloudtrail:0000534:c1eac38c-1e93-4862-86e7-3387a1b739997", "row_index": 534, "timestamp": "2017-02-20T01:23:10Z", "event_type": "ListServiceSpecificCredentials", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1eac38c-1e93-4862-86e7-3387a1b739997", "eventTime": "2017-02-20T01:23:10Z", "eventName": "ListServiceSpecificCredentials", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5", "serviceName": "codecommit.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4169ec8c-4c8d-4f62-92ae-f7ff2728d38d", "record_id": "flaws_cloudtrail:0000535:4169ec8c-4c8d-4f62-92ae-f7ff2728d38d", "row_index": 535, "timestamp": "2017-02-20T01:23:10Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4169ec8c-4c8d-4f62-92ae-f7ff2728d38d", "eventTime": "2017-02-20T01:23:10Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000, "userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37ab971c-89fb-4906-8c9b-3a0a6d85eab5", "record_id": "flaws_cloudtrail:0000536:37ab971c-89fb-4906-8c9b-3a0a6d85eab5", "row_index": 536, "timestamp": "2017-02-20T01:23:10Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37ab971c-89fb-4906-8c9b-3a0a6d85eab5", "eventTime": "2017-02-20T01:23:10Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d572aaa-623c-42e7-80fb-f3c678280686", "record_id": "flaws_cloudtrail:0000537:7d572aaa-623c-42e7-80fb-f3c678280686", "row_index": 537, "timestamp": "2017-02-20T01:23:10Z", "event_type": "DeleteAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d572aaa-623c-42e7-80fb-f3c678280686", "eventTime": "2017-02-20T01:23:10Z", "eventName": "DeleteAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5", "accessKeyId": "AKIA3JSUOQCUGDDKXCAI"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d8f680b-7bb8-41c8-884b-ae25ac861c21", "record_id": "flaws_cloudtrail:0000538:5d8f680b-7bb8-41c8-884b-ae25ac861c21", "row_index": 538, "timestamp": "2017-02-20T01:23:14Z", "event_type": "GetAccountSettings08306", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d8f680b-7bb8-41c8-884b-ae25ac861c21", "eventTime": "2017-02-20T01:23:14Z", "eventName": "GetAccountSettings08306", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"includePreviewFeatures": true}, "responseElements": {"previewFeatures": [], "accountUsage": {"totalCodeSize": 304, "functionCount": 1}, "accountLimit": {"concurrentExecutions": 100, "codeSizeZipped": 52428800, "totalCodeSize": 80530636800, "codeSizeUnzipped": 262144000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "077da643-f681-4eae-a27d-e8cc66f4cea3", "record_id": "flaws_cloudtrail:0000539:077da643-f681-4eae-a27d-e8cc66f4cea3", "row_index": 539, "timestamp": "2017-02-20T01:23:15Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "077da643-f681-4eae-a27d-e8cc66f4cea3", "eventTime": "2017-02-20T01:23:15Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b448b7a7-b97a-4590-ae24-a80e106499b0b", "record_id": "flaws_cloudtrail:0000540:b448b7a7-b97a-4590-ae24-a80e106499b0b", "row_index": 540, "timestamp": "2017-02-20T01:23:15Z", "event_type": "GetAccountSettings08306", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA1HCU56S459ZRFL3M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b448b7a7-b97a-4590-ae24-a80e106499b0b", "eventTime": "2017-02-20T01:23:15Z", "eventName": "GetAccountSettings08306", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA1HCU56S459ZRFL3M", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"includePreviewFeatures": true}, "responseElements": {"previewFeatures": [], "accountUsage": {"totalCodeSize": 304, "functionCount": 1}, "accountLimit": {"concurrentExecutions": 100, "codeSizeZipped": 52428800, "totalCodeSize": 80530636800, "codeSizeUnzipped": 262144000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2a8318d-d65b-4658-8cf7-aad2744da5e2", "record_id": "flaws_cloudtrail:0000541:f2a8318d-d65b-4658-8cf7-aad2744da5e2", "row_index": 541, "timestamp": "2017-02-20T01:28:56Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2a8318d-d65b-4658-8cf7-aad2744da5e2", "eventTime": "2017-02-20T01:28:56Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dd38a1c-bdb1-4222-8685-c74f97b5d6c4", "record_id": "flaws_cloudtrail:0000542:2dd38a1c-bdb1-4222-8685-c74f97b5d6c4", "row_index": 542, "timestamp": "2017-02-20T01:28:56Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dd38a1c-bdb1-4222-8685-c74f97b5d6c4", "eventTime": "2017-02-20T01:28:56Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68b2ff99-3039-4c4e-93e5-07b224cc887b", "record_id": "flaws_cloudtrail:0000543:68b2ff99-3039-4c4e-93e5-07b224cc887b", "row_index": 543, "timestamp": "2017-02-20T01:28:56Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68b2ff99-3039-4c4e-93e5-07b224cc887b", "eventTime": "2017-02-20T01:28:56Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d6b1f3b-7e8f-4358-bfd3-840682ca1570", "record_id": "flaws_cloudtrail:0000544:8d6b1f3b-7e8f-4358-bfd3-840682ca1570", "row_index": 544, "timestamp": "2017-02-20T01:28:56Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d6b1f3b-7e8f-4358-bfd3-840682ca1570", "eventTime": "2017-02-20T01:28:56Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0c83a00-8431-4dfa-b253-532e8bc826673", "record_id": "flaws_cloudtrail:0000545:a0c83a00-8431-4dfa-b253-532e8bc826673", "row_index": 545, "timestamp": "2017-02-20T01:28:56Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0c83a00-8431-4dfa-b253-532e8bc826673", "eventTime": "2017-02-20T01:28:56Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "681b1dc4-3079-4b32-a6bf-6dcea63a6fe7", "record_id": "flaws_cloudtrail:0000546:681b1dc4-3079-4b32-a6bf-6dcea63a6fe7", "row_index": 546, "timestamp": "2017-02-20T01:28:57Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "681b1dc4-3079-4b32-a6bf-6dcea63a6fe7", "eventTime": "2017-02-20T01:28:57Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f8a0859-e23a-4178-bd11-d8d6e1360ab3", "record_id": "flaws_cloudtrail:0000547:6f8a0859-e23a-4178-bd11-d8d6e1360ab3", "row_index": 547, "timestamp": "2017-02-20T01:28:57Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f8a0859-e23a-4178-bd11-d8d6e1360ab3", "eventTime": "2017-02-20T01:28:57Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7906f8f2-503e-48a2-87ee-baeb2f5967d8", "record_id": "flaws_cloudtrail:0000548:7906f8f2-503e-48a2-87ee-baeb2f5967d8", "row_index": 548, "timestamp": "2017-02-20T01:28:57Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7906f8f2-503e-48a2-87ee-baeb2f5967d8", "eventTime": "2017-02-20T01:28:57Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "893f8acd-186a-4a37-92e5-9059b0f3ce19", "record_id": "flaws_cloudtrail:0000549:893f8acd-186a-4a37-92e5-9059b0f3ce19", "row_index": 549, "timestamp": "2017-02-20T01:28:57Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "893f8acd-186a-4a37-92e5-9059b0f3ce19", "eventTime": "2017-02-20T01:28:57Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcd48f7d-1169-4792-9cc4-766464b1e653b", "record_id": "flaws_cloudtrail:0000550:bcd48f7d-1169-4792-9cc4-766464b1e653b", "row_index": 550, "timestamp": "2017-02-20T01:28:57Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcd48f7d-1169-4792-9cc4-766464b1e653b", "eventTime": "2017-02-20T01:28:57Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "544ad12e-08fb-4faa-ac8f-e8bf84523f82", "record_id": "flaws_cloudtrail:0000551:544ad12e-08fb-4faa-ac8f-e8bf84523f82", "row_index": 551, "timestamp": "2017-02-20T01:29:01Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "544ad12e-08fb-4faa-ac8f-e8bf84523f82", "eventTime": "2017-02-20T01:29:01Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf8c8fed-2614-46ad-a91a-d87812a72b71", "record_id": "flaws_cloudtrail:0000552:cf8c8fed-2614-46ad-a91a-d87812a72b71", "row_index": 552, "timestamp": "2017-02-20T01:29:02Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf8c8fed-2614-46ad-a91a-d87812a72b71", "eventTime": "2017-02-20T01:29:02Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "543831de-f8cd-412b-9d29-c06ffb2fff99", "record_id": "flaws_cloudtrail:0000553:543831de-f8cd-412b-9d29-c06ffb2fff99", "row_index": 553, "timestamp": "2017-02-20T01:29:02Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "543831de-f8cd-412b-9d29-c06ffb2fff99", "eventTime": "2017-02-20T01:29:02Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b75be31c-7c42-493d-851b-9f458d09eb7d", "record_id": "flaws_cloudtrail:0000554:b75be31c-7c42-493d-851b-9f458d09eb7d", "row_index": 554, "timestamp": "2017-02-20T01:29:02Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b75be31c-7c42-493d-851b-9f458d09eb7d", "eventTime": "2017-02-20T01:29:02Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95947e24-1e88-4713-ac06-b069c3d859fd", "record_id": "flaws_cloudtrail:0000555:95947e24-1e88-4713-ac06-b069c3d859fd", "row_index": 555, "timestamp": "2017-02-20T01:29:02Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95947e24-1e88-4713-ac06-b069c3d859fd", "eventTime": "2017-02-20T01:29:02Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f381bad6-4af3-466d-84c5-da1747d70789", "record_id": "flaws_cloudtrail:0000556:f381bad6-4af3-466d-84c5-da1747d70789", "row_index": 556, "timestamp": "2017-02-20T01:29:02Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f381bad6-4af3-466d-84c5-da1747d70789", "eventTime": "2017-02-20T01:29:02Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42b372b9-a2d7-476c-b2e0-0e095530d9c", "record_id": "flaws_cloudtrail:0000557:42b372b9-a2d7-476c-b2e0-0e095530d9c", "row_index": 557, "timestamp": "2017-02-20T01:29:08Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42b372b9-a2d7-476c-b2e0-0e095530d9c", "eventTime": "2017-02-20T01:29:08Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be9491e2-d355-4356-b722-fde97232b8", "record_id": "flaws_cloudtrail:0000558:be9491e2-d355-4356-b722-fde97232b8", "row_index": 558, "timestamp": "2017-02-20T01:29:11Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be9491e2-d355-4356-b722-fde97232b8", "eventTime": "2017-02-20T01:29:11Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12d7af91-25e8-4429-b7bc-10e2b1df3f44", "record_id": "flaws_cloudtrail:0000559:12d7af91-25e8-4429-b7bc-10e2b1df3f44", "row_index": 559, "timestamp": "2017-02-20T01:29:23Z", "event_type": "CreateUser", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12d7af91-25e8-4429-b7bc-10e2b1df3f44", "eventTime": "2017-02-20T01:29:23Z", "eventName": "CreateUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5"}, "responseElements": {"user": {"path": "/", "arn": "arn:aws:iam::811596193553:user/Level5", "userId": "AIDA8N2W2FPU7NVSZRY0J", "createDate": "Feb 20, 2017 1:29:23 AM", "userName": "Level5"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7ccb9b0-2924-4637-a78d-697fec6a6a7f", "record_id": "flaws_cloudtrail:0000560:f7ccb9b0-2924-4637-a78d-697fec6a6a7f", "row_index": 560, "timestamp": "2017-02-20T01:29:23Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7ccb9b0-2924-4637-a78d-697fec6a6a7f", "eventTime": "2017-02-20T01:29:23Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91f2c833-8584-4527-92a0-22b21b0cfc58", "record_id": "flaws_cloudtrail:0000561:91f2c833-8584-4527-92a0-22b21b0cfc58", "row_index": 561, "timestamp": "2017-02-20T01:29:23Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91f2c833-8584-4527-92a0-22b21b0cfc58", "eventTime": "2017-02-20T01:29:23Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bdb9359-098b-4aa6-9b3e-739287bbb315", "record_id": "flaws_cloudtrail:0000562:0bdb9359-098b-4aa6-9b3e-739287bbb315", "row_index": 562, "timestamp": "2017-02-20T01:29:23Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bdb9359-098b-4aa6-9b3e-739287bbb315", "eventTime": "2017-02-20T01:29:23Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "621625e6a-58b9-4f4e-82bd-abef6683a7bd", "record_id": "flaws_cloudtrail:0000563:621625e6a-58b9-4f4e-82bd-abef6683a7bd", "row_index": 563, "timestamp": "2017-02-20T01:29:23Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "621625e6a-58b9-4f4e-82bd-abef6683a7bd", "eventTime": "2017-02-20T01:29:23Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5154ba80-9e31-4460-a6bf-85de58e0f0e4", "record_id": "flaws_cloudtrail:0000564:5154ba80-9e31-4460-a6bf-85de58e0f0e4", "row_index": 564, "timestamp": "2017-02-20T01:29:23Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5154ba80-9e31-4460-a6bf-85de58e0f0e4", "eventTime": "2017-02-20T01:29:23Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aba2d26-cbe0-4e86-85db-cae3a16c154d", "record_id": "flaws_cloudtrail:0000565:9aba2d26-cbe0-4e86-85db-cae3a16c154d", "row_index": 565, "timestamp": "2017-02-20T01:29:23Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aba2d26-cbe0-4e86-85db-cae3a16c154d", "eventTime": "2017-02-20T01:29:23Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8475a3cc-f40a-4255-93f7-793f877b20ef", "record_id": "flaws_cloudtrail:0000566:8475a3cc-f40a-4255-93f7-793f877b20ef", "row_index": 566, "timestamp": "2017-02-20T01:29:24Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8475a3cc-f40a-4255-93f7-793f877b20ef", "eventTime": "2017-02-20T01:29:24Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6fc707a-3e8b-4536-8560-f6fd427dd8a3", "record_id": "flaws_cloudtrail:0000567:e6fc707a-3e8b-4536-8560-f6fd427dd8a3", "row_index": 567, "timestamp": "2017-02-20T01:29:24Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6fc707a-3e8b-4536-8560-f6fd427dd8a3", "eventTime": "2017-02-20T01:29:24Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v9"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1da71cd-4ea2-455e-95ad-be5270c4e894", "record_id": "flaws_cloudtrail:0000568:e1da71cd-4ea2-455e-95ad-be5270c4e894", "row_index": 568, "timestamp": "2017-02-20T01:29:24Z", "event_type": "CreateAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1da71cd-4ea2-455e-95ad-be5270c4e894", "eventTime": "2017-02-20T01:29:24Z", "eventName": "CreateAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5"}, "responseElements": {"accessKey": {"accessKeyId": "AKIAL34JFHCCL9Q1SPED", "status": "Active", "userName": "Level5", "createDate": "Feb 20, 2017 1:29:24 AM"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be4c36b4-146f-4a85-b298-f429025ec8", "record_id": "flaws_cloudtrail:0000569:be4c36b4-146f-4a85-b298-f429025ec8", "row_index": 569, "timestamp": "2017-02-20T01:29:24Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be4c36b4-146f-4a85-b298-f429025ec8", "eventTime": "2017-02-20T01:29:24Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f871b9b-91e9-472e-ada2-6fdbf107d22c", "record_id": "flaws_cloudtrail:0000570:5f871b9b-91e9-472e-ada2-6fdbf107d22c", "row_index": 570, "timestamp": "2017-02-20T01:29:24Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f871b9b-91e9-472e-ada2-6fdbf107d22c", "eventTime": "2017-02-20T01:29:24Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59e657fa-9568-4445-8aa8-be269fc49b98", "record_id": "flaws_cloudtrail:0000571:59e657fa-9568-4445-8aa8-be269fc49b98", "row_index": 571, "timestamp": "2017-02-20T01:29:24Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59e657fa-9568-4445-8aa8-be269fc49b98", "eventTime": "2017-02-20T01:29:24Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b360123ac-87a5-4116-9314-0e1f05848c1", "record_id": "flaws_cloudtrail:0000572:b360123ac-87a5-4116-9314-0e1f05848c1", "row_index": 572, "timestamp": "2017-02-20T01:29:24Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b360123ac-87a5-4116-9314-0e1f05848c1", "eventTime": "2017-02-20T01:29:24Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e9d8c11-374c-4411-b42e-8195b15f55fb", "record_id": "flaws_cloudtrail:0000573:7e9d8c11-374c-4411-b42e-8195b15f55fb", "row_index": 573, "timestamp": "2017-02-20T01:29:24Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e9d8c11-374c-4411-b42e-8195b15f55fb", "eventTime": "2017-02-20T01:29:24Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb090bb1-1778-4232-bea5-e285bbd53ddf", "record_id": "flaws_cloudtrail:0000574:cb090bb1-1778-4232-bea5-e285bbd53ddf", "row_index": 574, "timestamp": "2017-02-20T01:29:24Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb090bb1-1778-4232-bea5-e285bbd53ddf", "eventTime": "2017-02-20T01:29:24Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee711e71-15ce-4f3c-b8be-d1825390eaad", "record_id": "flaws_cloudtrail:0000575:ee711e71-15ce-4f3c-b8be-d1825390eaad", "row_index": 575, "timestamp": "2017-02-20T01:29:24Z", "event_type": "AttachUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee711e71-15ce-4f3c-b8be-d1825390eaad", "eventTime": "2017-02-20T01:29:24Z", "eventName": "AttachUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5", "policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "283209c7-dad5-4922-99ad-f565ed0d9ed3", "record_id": "flaws_cloudtrail:0000576:283209c7-dad5-4922-99ad-f565ed0d9ed3", "row_index": 576, "timestamp": "2017-02-20T01:29:24Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "283209c7-dad5-4922-99ad-f565ed0d9ed3", "eventTime": "2017-02-20T01:29:24Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000, "userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df45b0ad-3919-41f7-8fd2-85a791c90b47", "record_id": "flaws_cloudtrail:0000577:df45b0ad-3919-41f7-8fd2-85a791c90b47", "row_index": 577, "timestamp": "2017-02-20T01:29:24Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df45b0ad-3919-41f7-8fd2-85a791c90b47", "eventTime": "2017-02-20T01:29:24Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v9"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02048e97-3ad7-4b3e-ae7a-f958b3e53185", "record_id": "flaws_cloudtrail:0000578:02048e97-3ad7-4b3e-ae7a-f958b3e53185", "row_index": 578, "timestamp": "2017-02-20T01:29:24Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02048e97-3ad7-4b3e-ae7a-f958b3e53185", "eventTime": "2017-02-20T01:29:24Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "def6e4d4-91cc-48f1-906e-92f37f69c48e", "record_id": "flaws_cloudtrail:0000579:def6e4d4-91cc-48f1-906e-92f37f69c48e", "row_index": 579, "timestamp": "2017-02-20T01:31:25Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDA8N2W2FPU7NVSZRY0J", "user_name": "Level5", "access_key_id": "AKIAL34JFHCCL9Q1SPED", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "def6e4d4-91cc-48f1-906e-92f37f69c48e", "eventTime": "2017-02-20T01:31:25Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA8N2W2FPU7NVSZRY0J", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAL34JFHCCL9Q1SPED", "userName": "Level5"}, "requestParameters": {"marker": "ACo9ROiWHBgHvn57x8gOWwhV6k4PYWVJiLCE8x6fNMk3pnJfFFVnyIhMdaPKAbcyQzcm1rkIGm6dSUWSbW+1RY8wpkpxzIzW7Ot86pPlDzMwqA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43042df0-023e-435b-9af1-151ff515e187", "record_id": "flaws_cloudtrail:0000580:43042df0-023e-435b-9af1-151ff515e187", "row_index": 580, "timestamp": "2017-02-20T01:31:25Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDA8N2W2FPU7NVSZRY0J", "user_name": "Level5", "access_key_id": "AKIAL34JFHCCL9Q1SPED", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43042df0-023e-435b-9af1-151ff515e187", "eventTime": "2017-02-20T01:31:25Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA8N2W2FPU7NVSZRY0J", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAL34JFHCCL9Q1SPED", "userName": "Level5"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb60e45e-46ff-44d7-9264-ea8a0cf5b944", "record_id": "flaws_cloudtrail:0000581:bb60e45e-46ff-44d7-9264-ea8a0cf5b944", "row_index": 581, "timestamp": "2017-02-20T01:31:25Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDA8N2W2FPU7NVSZRY0J", "user_name": "Level5", "access_key_id": "AKIAL34JFHCCL9Q1SPED", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb60e45e-46ff-44d7-9264-ea8a0cf5b944", "eventTime": "2017-02-20T01:31:25Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA8N2W2FPU7NVSZRY0J", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAL34JFHCCL9Q1SPED", "userName": "Level5"}, "requestParameters": {"marker": "AB/knzWQCXp2pztYAVVTBO0K5Z9KbNJzpqiiyiKdjZyoiBv3R01Ghx9332HRLZtW2GBlUd0LnV/y/AT7ZtIZOqlHT3pKhPd1J5TRg3A9odKkmw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e27aec89-8226-42a8-b161-3d00cdbb0f9c", "record_id": "flaws_cloudtrail:0000582:e27aec89-8226-42a8-b161-3d00cdbb0f9c", "row_index": 582, "timestamp": "2017-02-20T01:31:31Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDA8N2W2FPU7NVSZRY0J", "user_name": "Level5", "access_key_id": "AKIAL34JFHCCL9Q1SPED", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e27aec89-8226-42a8-b161-3d00cdbb0f9c", "eventTime": "2017-02-20T01:31:31Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA8N2W2FPU7NVSZRY0J", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAL34JFHCCL9Q1SPED", "userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc2a6c8b-bb32-4b84-b789-dbbd155315abf", "record_id": "flaws_cloudtrail:0000583:bc2a6c8b-bb32-4b84-b789-dbbd155315abf", "row_index": 583, "timestamp": "2017-02-20T01:32:44Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDA8N2W2FPU7NVSZRY0J", "user_name": "Level5", "access_key_id": "AKIAL34JFHCCL9Q1SPED", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc2a6c8b-bb32-4b84-b789-dbbd155315abf", "eventTime": "2017-02-20T01:32:44Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA8N2W2FPU7NVSZRY0J", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAL34JFHCCL9Q1SPED", "userName": "Level5"}, "requestParameters": {"userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e43939a-a8eb-4e16-bc99-ac48ad6ec1f5", "record_id": "flaws_cloudtrail:0000584:e43939a-a8eb-4e16-bc99-ac48ad6ec1f5", "row_index": 584, "timestamp": "2017-02-20T01:33:21Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDA8N2W2FPU7NVSZRY0J", "user_name": "Level5", "access_key_id": "AKIAL34JFHCCL9Q1SPED", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e43939a-a8eb-4e16-bc99-ac48ad6ec1f5", "eventTime": "2017-02-20T01:33:21Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA8N2W2FPU7NVSZRY0J", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAL34JFHCCL9Q1SPED", "userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eba6246f-123b-45be-9e56-daff79e08c13", "record_id": "flaws_cloudtrail:0000585:eba6246f-123b-45be-9e56-daff79e08c13", "row_index": 585, "timestamp": "2017-02-20T01:33:36Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDA8N2W2FPU7NVSZRY0J", "user_name": "Level5", "access_key_id": "AKIAL34JFHCCL9Q1SPED", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eba6246f-123b-45be-9e56-daff79e08c13", "eventTime": "2017-02-20T01:33:36Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA8N2W2FPU7NVSZRY0J", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAL34JFHCCL9Q1SPED", "userName": "Level5"}, "requestParameters": {"userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b567636f-5b6e-4911-a19b-3bd583efb36e", "record_id": "flaws_cloudtrail:0000586:b567636f-5b6e-4911-a19b-3bd583efb36e", "row_index": 586, "timestamp": "2017-02-20T01:34:42Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDA8N2W2FPU7NVSZRY0J", "user_name": "Level5", "access_key_id": "AKIAL34JFHCCL9Q1SPED", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b567636f-5b6e-4911-a19b-3bd583efb36e", "eventTime": "2017-02-20T01:34:42Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA8N2W2FPU7NVSZRY0J", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAL34JFHCCL9Q1SPED", "userName": "Level5"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9eea063d-0d29-4ef9-b83e-b1020dec8692", "record_id": "flaws_cloudtrail:0000587:9eea063d-0d29-4ef9-b83e-b1020dec8692", "row_index": 587, "timestamp": "2017-02-20T01:34:42Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDA8N2W2FPU7NVSZRY0J", "user_name": "Level5", "access_key_id": "AKIAL34JFHCCL9Q1SPED", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9eea063d-0d29-4ef9-b83e-b1020dec8692", "eventTime": "2017-02-20T01:34:42Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA8N2W2FPU7NVSZRY0J", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAL34JFHCCL9Q1SPED", "userName": "Level5"}, "requestParameters": {"marker": "AA8OrCWa8jvaSyN5gD5StDqks2gkQEsjvfkKFn25DyDBKYweQGGZm/MiNtRo71AhCN0nupOuvYpDdpU79L4ylH+4HXC6Q8gjXk4AiWaB8qNgEg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a214ff9-83db-42c2-b4e1-df08e05cbd08", "record_id": "flaws_cloudtrail:0000588:5a214ff9-83db-42c2-b4e1-df08e05cbd08", "row_index": 588, "timestamp": "2017-02-20T01:34:43Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDA8N2W2FPU7NVSZRY0J", "user_name": "Level5", "access_key_id": "AKIAL34JFHCCL9Q1SPED", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a214ff9-83db-42c2-b4e1-df08e05cbd08", "eventTime": "2017-02-20T01:34:43Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA8N2W2FPU7NVSZRY0J", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAL34JFHCCL9Q1SPED", "userName": "Level5"}, "requestParameters": {"marker": "AB7NfySs/D+Aw9icQyQpNSJUIanOCwGHb9TWtCnNTMEoTwBKz1a8BKWRX9jLakm1yt1EghR2m2ZtArgdl+Fu+F17eYogcBVp7ZgbkIKrTlQB4g==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67fa086a-1e01-4421-9efb-c1c9e81b1ee7", "record_id": "flaws_cloudtrail:0000589:67fa086a-1e01-4421-9efb-c1c9e81b1ee7", "row_index": 589, "timestamp": "2017-02-20T01:35:36Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDA8N2W2FPU7NVSZRY0J", "user_name": "Level5", "access_key_id": "AKIAL34JFHCCL9Q1SPED", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67fa086a-1e01-4421-9efb-c1c9e81b1ee7", "eventTime": "2017-02-20T01:35:36Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA8N2W2FPU7NVSZRY0J", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAL34JFHCCL9Q1SPED", "userName": "Level5"}, "requestParameters": {"onlyAttached": true}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46588fb9-4602-4c4e-b830-3b62a380ecbc", "record_id": "flaws_cloudtrail:0000590:46588fb9-4602-4c4e-b830-3b62a380ecbc", "row_index": 590, "timestamp": "2017-02-20T01:36:45Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level5", "account_id": "811596193553", "principal_id": "AIDA8N2W2FPU7NVSZRY0J", "user_name": "Level5", "access_key_id": "AKIAL34JFHCCL9Q1SPED", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46588fb9-4602-4c4e-b830-3b62a380ecbc", "eventTime": "2017-02-20T01:36:45Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA8N2W2FPU7NVSZRY0J", "arn": "arn:aws:iam::811596193553:user/Level5", "accountId": "811596193553", "accessKeyId": "AKIAL34JFHCCL9Q1SPED", "userName": "Level5"}, "requestParameters": {"userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c2d8534-ddd8-4447-9d0a-35a7aea8a4d2", "record_id": "flaws_cloudtrail:0000591:4c2d8534-ddd8-4447-9d0a-35a7aea8a4d2", "row_index": 591, "timestamp": "2017-02-20T01:38:47Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c2d8534-ddd8-4447-9d0a-35a7aea8a4d2", "eventTime": "2017-02-20T01:38:47Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00afafbc-c37f-4f05-b56d-9f3c6d02988a", "record_id": "flaws_cloudtrail:0000592:00afafbc-c37f-4f05-b56d-9f3c6d02988a", "row_index": 592, "timestamp": "2017-02-20T01:38:47Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00afafbc-c37f-4f05-b56d-9f3c6d02988a", "eventTime": "2017-02-20T01:38:47Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17d9eca3-fbdd-47c0-90a7-ca4369b3b9ce", "record_id": "flaws_cloudtrail:0000593:17d9eca3-fbdd-47c0-90a7-ca4369b3b9ce", "row_index": 593, "timestamp": "2017-02-20T01:38:47Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17d9eca3-fbdd-47c0-90a7-ca4369b3b9ce", "eventTime": "2017-02-20T01:38:47Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3496e224-eb48-4cda-9d9a-40790c2ff461", "record_id": "flaws_cloudtrail:0000594:3496e224-eb48-4cda-9d9a-40790c2ff461", "row_index": 594, "timestamp": "2017-02-20T01:38:47Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3496e224-eb48-4cda-9d9a-40790c2ff461", "eventTime": "2017-02-20T01:38:47Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0e15984-0d06-4588-80f4-91c888420d43", "record_id": "flaws_cloudtrail:0000595:e0e15984-0d06-4588-80f4-91c888420d43", "row_index": 595, "timestamp": "2017-02-20T01:38:47Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0e15984-0d06-4588-80f4-91c888420d43", "eventTime": "2017-02-20T01:38:47Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c85280-dd58-43dc-84a8-629f025cf80b", "record_id": "flaws_cloudtrail:0000596:3c85280-dd58-43dc-84a8-629f025cf80b", "row_index": 596, "timestamp": "2017-02-20T01:38:48Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c85280-dd58-43dc-84a8-629f025cf80b", "eventTime": "2017-02-20T01:38:48Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17dcd7c2-21b4-475b-aa29-52037f69e136", "record_id": "flaws_cloudtrail:0000597:17dcd7c2-21b4-475b-aa29-52037f69e136", "row_index": 597, "timestamp": "2017-02-20T01:38:48Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17dcd7c2-21b4-475b-aa29-52037f69e136", "eventTime": "2017-02-20T01:38:48Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e7666a3-c931-4626-b8c2-1e9bc65c984e", "record_id": "flaws_cloudtrail:0000598:3e7666a3-c931-4626-b8c2-1e9bc65c984e", "row_index": 598, "timestamp": "2017-02-20T01:38:48Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e7666a3-c931-4626-b8c2-1e9bc65c984e", "eventTime": "2017-02-20T01:38:48Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a823597a7-6b0b-4d54-8f9c-1975cd9a185e", "record_id": "flaws_cloudtrail:0000599:a823597a7-6b0b-4d54-8f9c-1975cd9a185e", "row_index": 599, "timestamp": "2017-02-20T01:38:48Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a823597a7-6b0b-4d54-8f9c-1975cd9a185e", "eventTime": "2017-02-20T01:38:48Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53d92da9-1550-4217-a084-c4f5b085d402", "record_id": "flaws_cloudtrail:0000600:53d92da9-1550-4217-a084-c4f5b085d402", "row_index": 600, "timestamp": "2017-02-20T01:38:48Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53d92da9-1550-4217-a084-c4f5b085d402", "eventTime": "2017-02-20T01:38:48Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f4d0961-b069-42d1-999c-f016d97da71a", "record_id": "flaws_cloudtrail:0000601:0f4d0961-b069-42d1-999c-f016d97da71a", "row_index": 601, "timestamp": "2017-02-20T01:38:50Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f4d0961-b069-42d1-999c-f016d97da71a", "eventTime": "2017-02-20T01:38:50Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6af547b6-f784-4276-8c4c-e23f92b353c2", "record_id": "flaws_cloudtrail:0000602:6af547b6-f784-4276-8c4c-e23f92b353c2", "row_index": 602, "timestamp": "2017-02-20T01:38:51Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6af547b6-f784-4276-8c4c-e23f92b353c2", "eventTime": "2017-02-20T01:38:51Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"userName": "Level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d955e5d8-6133-4662-9e78-408034be616243", "record_id": "flaws_cloudtrail:0000603:d955e5d8-6133-4662-9e78-408034be616243", "row_index": 603, "timestamp": "2017-02-20T01:38:53Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d955e5d8-6133-4662-9e78-408034be616243", "eventTime": "2017-02-20T01:38:53Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0ab0b5d-db64-4ca0-9cd6-ed369812a0e7", "record_id": "flaws_cloudtrail:0000604:d0ab0b5d-db64-4ca0-9cd6-ed369812a0e7", "row_index": 604, "timestamp": "2017-02-20T01:38:53Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0ab0b5d-db64-4ca0-9cd6-ed369812a0e7", "eventTime": "2017-02-20T01:38:53Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d280e590-6de6-4691-a748-64a7c104393f", "record_id": "flaws_cloudtrail:0000605:d280e590-6de6-4691-a748-64a7c104393f", "row_index": 605, "timestamp": "2017-02-20T01:38:53Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d280e590-6de6-4691-a748-64a7c104393f", "eventTime": "2017-02-20T01:38:53Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c21917d-2ea4-4d3a-9d7c-475fd01f7505", "record_id": "flaws_cloudtrail:0000606:8c21917d-2ea4-4d3a-9d7c-475fd01f7505", "row_index": 606, "timestamp": "2017-02-20T01:38:53Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c21917d-2ea4-4d3a-9d7c-475fd01f7505", "eventTime": "2017-02-20T01:38:53Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31389b9a-2ee1-49d0-bec6-e3db3a4f30f6", "record_id": "flaws_cloudtrail:0000607:31389b9a-2ee1-49d0-bec6-e3db3a4f30f6", "row_index": 607, "timestamp": "2017-02-20T01:38:53Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31389b9a-2ee1-49d0-bec6-e3db3a4f30f6", "eventTime": "2017-02-20T01:38:53Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c43eb62-30be-4736-a0e2-14fbcad00f66", "record_id": "flaws_cloudtrail:0000608:2c43eb62-30be-4736-a0e2-14fbcad00f66", "row_index": 608, "timestamp": "2017-02-20T01:38:53Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c43eb62-30be-4736-a0e2-14fbcad00f66", "eventTime": "2017-02-20T01:38:53Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85cd119d-ce49-4bf6-b88f-5317cea83223", "record_id": "flaws_cloudtrail:0000609:85cd119d-ce49-4bf6-b88f-5317cea83223", "row_index": 609, "timestamp": "2017-02-20T01:38:54Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAURB6DGYU6PGF0YWS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85cd119d-ce49-4bf6-b88f-5317cea83223", "eventTime": "2017-02-20T01:38:54Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAURB6DGYU6PGF0YWS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-19T15:37:15Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}