Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM principal appears to confirm who they are, survey the account’s audit-trail configuration, and then take action to reduce CloudTrail visibility. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "064e66ee-0b26-4ca5-87c3-fb0a802df7a7", "record_id": "flaws_cloudtrail:0000000:064e66ee-0b26-4ca5-87c3-fb0a802df7a7", "row_index": 0, "timestamp": "2019-05-27T21:19:54Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "064e66ee-0b26-4ca5-87c3-fb0a802df7a7", "eventTime": "2019-05-27T21:19:54Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c96ab0a-901b-4880-9cad-fb3c3a534dd4", "record_id": "flaws_cloudtrail:0000001:2c96ab0a-901b-4880-9cad-fb3c3a534dd4", "row_index": 1, "timestamp": "2019-05-27T21:19:54Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c96ab0a-901b-4880-9cad-fb3c3a534dd4", "eventTime": "2019-05-27T21:19:54Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.InvalidRequest", "errorMessage": "The request received was invalid.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17aaae3d-a571-488c-ad20-8c8f163f3662", "record_id": "flaws_cloudtrail:0000002:17aaae3d-a571-488c-ad20-8c8f163f3662", "row_index": 2, "timestamp": "2019-05-27T21:19:54Z", "event_type": "DescribeSpotFleetInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17aaae3d-a571-488c-ad20-8c8f163f3662", "eventTime": "2019-05-27T21:19:54Z", "eventName": "DescribeSpotFleetInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeSpotFleetInstancesRequest": {"SpotFleetRequestId": "dummy_data"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80676e-b054-49b4-ba24-de8ae7ca65bc", "record_id": "flaws_cloudtrail:0000003:80676e-b054-49b4-ba24-de8ae7ca65bc", "row_index": 3, "timestamp": "2019-05-27T21:19:54Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80676e-b054-49b4-ba24-de8ae7ca65bc", "eventTime": "2019-05-27T21:19:54Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "dummy_data", "attributeType": "PRODUCT_CODES"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53fd51b2-28b4-4a84-9102-62452c5e20c1", "record_id": "flaws_cloudtrail:0000004:53fd51b2-28b4-4a84-9102-62452c5e20c1", "row_index": 4, "timestamp": "2019-05-27T21:19:54Z", "event_type": "DescribeSpotDatafeedSubscription", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53fd51b2-28b4-4a84-9102-62452c5e20c1", "eventTime": "2019-05-27T21:19:54Z", "eventName": "DescribeSpotDatafeedSubscription", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cea031b-60bd-4f68-bbe0-6f1482b61e40", "record_id": "flaws_cloudtrail:0000005:5cea031b-60bd-4f68-bbe0-6f1482b61e40", "row_index": 5, "timestamp": "2019-05-27T21:19:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cea031b-60bd-4f68-bbe0-6f1482b61e40", "eventTime": "2019-05-27T21:19:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f77a858-497a-4d7b-8273-966d22d3f30e", "record_id": "flaws_cloudtrail:0000006:5f77a858-497a-4d7b-8273-966d22d3f30e", "row_index": 6, "timestamp": "2019-05-27T21:19:54Z", "event_type": "DescribeScheduledInstanceAvailability", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 951, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f77a858-497a-4d7b-8273-966d22d3f30e", "eventTime": "2019-05-27T21:19:54Z", "eventName": "DescribeScheduledInstanceAvailability", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeScheduledInstanceAvailabilityRequest": {"FirstSlotStartTimeRange": {"EarliestTime": "2015-01-01T00:00:00Z", "LatestTime": "2015-01-01T00:00:00Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d0bb389-0594-4bf0-94d9-c96f0c290a7f", "record_id": "flaws_cloudtrail:0000007:9d0bb389-0594-4bf0-94d9-c96f0c290a7f", "row_index": 7, "timestamp": "2019-05-27T21:19:54Z", "event_type": "DescribeScheduledInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d0bb389-0594-4bf0-94d9-c96f0c290a7f", "eventTime": "2019-05-27T21:19:54Z", "eventName": "DescribeScheduledInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeScheduledInstancesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "597db757-474f-42b3-bb57-7848f49706cc", "record_id": "flaws_cloudtrail:0000008:597db757-474f-42b3-bb57-7848f49706cc", "row_index": 8, "timestamp": "2019-05-27T21:19:54Z", "event_type": "DescribeSecurityGroupReferences", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "597db757-474f-42b3-bb57-7848f49706cc", "eventTime": "2019-05-27T21:19:54Z", "eventName": "DescribeSecurityGroupReferences", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeSecurityGroupReferencesRequest": {"GroupId": {"tag": 1, "content": "test"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "064e66ee-0b26-4ca5-87c3-fb0a802df7a7", "record_id": "flaws_cloudtrail:0000009:064e66ee-0b26-4ca5-87c3-fb0a802df7a7", "row_index": 9, "timestamp": "2019-05-27T21:19:54Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "064e66ee-0b26-4ca5-87c3-fb0a802df7a7", "eventTime": "2019-05-27T21:19:54Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c96ab0a-901b-4880-9cad-fb3c3a534dd4", "record_id": "flaws_cloudtrail:0000010:2c96ab0a-901b-4880-9cad-fb3c3a534dd4", "row_index": 10, "timestamp": "2019-05-27T21:19:54Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c96ab0a-901b-4880-9cad-fb3c3a534dd4", "eventTime": "2019-05-27T21:19:54Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.InvalidRequest", "errorMessage": "The request received was invalid.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bc6ee33-63c8-4c47-b055-351108edb5dc", "record_id": "flaws_cloudtrail:0000011:3bc6ee33-63c8-4c47-b055-351108edb5dc", "row_index": 11, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bc6ee33-63c8-4c47-b055-351108edb5dc", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "966003fd0-7d65-4133-b029-19f11d7956c3", "record_id": "flaws_cloudtrail:0000012:966003fd0-7d65-4133-b029-19f11d7956c3", "row_index": 12, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "966003fd0-7d65-4133-b029-19f11d7956c3", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bac7fd45-29e4-44ff-be2c-fb530c3976a7", "record_id": "flaws_cloudtrail:0000013:bac7fd45-29e4-44ff-be2c-fb530c3976a7", "row_index": 13, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bac7fd45-29e4-44ff-be2c-fb530c3976a7", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03b33b94-3807-4a6e-8a75-c45a4d4f606c", "record_id": "flaws_cloudtrail:0000014:03b33b94-3807-4a6e-8a75-c45a4d4f606c", "row_index": 14, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeSpotFleetRequests", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03b33b94-3807-4a6e-8a75-c45a4d4f606c", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeSpotFleetRequests", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeSpotFleetRequestsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "384b9a8b-d04b-49c6-a28d-a3a0b74c8223", "record_id": "flaws_cloudtrail:0000015:384b9a8b-d04b-49c6-a28d-a3a0b74c8223", "row_index": 15, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeSpotFleetRequestHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 906, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "384b9a8b-d04b-49c6-a28d-a3a0b74c8223", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeSpotFleetRequestHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeSpotFleetRequestHistoryRequest": {"SpotFleetRequestId": "dummy_data", "StartTime": "2015-01-01T00:00:00Z"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36a8d62f-5334-41e4-8a9f-5ca8202ec2dd", "record_id": "flaws_cloudtrail:0000016:36a8d62f-5334-41e4-8a9f-5ca8202ec2dd", "row_index": 16, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeStaleSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36a8d62f-5334-41e4-8a9f-5ca8202ec2dd", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeStaleSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeStaleSecurityGroupsRequest": {"VpcId": "dummy_data"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41a5af05-1e52-4b77-8e6f-f572a75d1bdf", "record_id": "flaws_cloudtrail:0000017:41a5af05-1e52-4b77-8e6f-f572a75d1bdf", "row_index": 17, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeSpotInstanceRequests", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41a5af05-1e52-4b77-8e6f-f572a75d1bdf", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeSpotInstanceRequests", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"spotInstanceRequestIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c52490-b693-43cc-acce-794fddb1618d", "record_id": "flaws_cloudtrail:0000018:c52490-b693-43cc-acce-794fddb1618d", "row_index": 18, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeVolumeAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c52490-b693-43cc-acce-794fddb1618d", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeVolumeAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeId": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59fd135d-e6c4-40ab-9707-6a0447d775cd", "record_id": "flaws_cloudtrail:0000019:59fd135d-e6c4-40ab-9707-6a0447d775cd", "row_index": 19, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59fd135d-e6c4-40ab-9707-6a0447d775cd", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20c4332d-44a5-4c01-857f-f3534aeab57f", "record_id": "flaws_cloudtrail:0000020:20c4332d-44a5-4c01-857f-f3534aeab57f", "row_index": 20, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20c4332d-44a5-4c01-857f-f3534aeab57f", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bc6ee33-63c8-4c47-b055-351108edb5dc", "record_id": "flaws_cloudtrail:0000021:3bc6ee33-63c8-4c47-b055-351108edb5dc", "row_index": 21, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bc6ee33-63c8-4c47-b055-351108edb5dc", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "966003fd0-7d65-4133-b029-19f11d7956c3", "record_id": "flaws_cloudtrail:0000022:966003fd0-7d65-4133-b029-19f11d7956c3", "row_index": 22, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "966003fd0-7d65-4133-b029-19f11d7956c3", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bac7fd45-29e4-44ff-be2c-fb530c3976a7", "record_id": "flaws_cloudtrail:0000023:bac7fd45-29e4-44ff-be2c-fb530c3976a7", "row_index": 23, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bac7fd45-29e4-44ff-be2c-fb530c3976a7", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03b33b94-3807-4a6e-8a75-c45a4d4f606c", "record_id": "flaws_cloudtrail:0000024:03b33b94-3807-4a6e-8a75-c45a4d4f606c", "row_index": 24, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeSpotFleetRequests", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03b33b94-3807-4a6e-8a75-c45a4d4f606c", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeSpotFleetRequests", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeSpotFleetRequestsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "384b9a8b-d04b-49c6-a28d-a3a0b74c8223", "record_id": "flaws_cloudtrail:0000025:384b9a8b-d04b-49c6-a28d-a3a0b74c8223", "row_index": 25, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeSpotFleetRequestHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 906, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "384b9a8b-d04b-49c6-a28d-a3a0b74c8223", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeSpotFleetRequestHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeSpotFleetRequestHistoryRequest": {"SpotFleetRequestId": "dummy_data", "StartTime": "2015-01-01T00:00:00Z"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36a8d62f-5334-41e4-8a9f-5ca8202ec2dd", "record_id": "flaws_cloudtrail:0000026:36a8d62f-5334-41e4-8a9f-5ca8202ec2dd", "row_index": 26, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeStaleSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36a8d62f-5334-41e4-8a9f-5ca8202ec2dd", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeStaleSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeStaleSecurityGroupsRequest": {"VpcId": "dummy_data"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41a5af05-1e52-4b77-8e6f-f572a75d1bdf", "record_id": "flaws_cloudtrail:0000027:41a5af05-1e52-4b77-8e6f-f572a75d1bdf", "row_index": 27, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeSpotInstanceRequests", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41a5af05-1e52-4b77-8e6f-f572a75d1bdf", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeSpotInstanceRequests", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"spotInstanceRequestIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c52490-b693-43cc-acce-794fddb1618d", "record_id": "flaws_cloudtrail:0000028:c52490-b693-43cc-acce-794fddb1618d", "row_index": 28, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeVolumeAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c52490-b693-43cc-acce-794fddb1618d", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeVolumeAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeId": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59fd135d-e6c4-40ab-9707-6a0447d775cd", "record_id": "flaws_cloudtrail:0000029:59fd135d-e6c4-40ab-9707-6a0447d775cd", "row_index": 29, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59fd135d-e6c4-40ab-9707-6a0447d775cd", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20c4332d-44a5-4c01-857f-f3534aeab57f", "record_id": "flaws_cloudtrail:0000030:20c4332d-44a5-4c01-857f-f3534aeab57f", "row_index": 30, "timestamp": "2019-05-27T21:19:55Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20c4332d-44a5-4c01-857f-f3534aeab57f", "eventTime": "2019-05-27T21:19:55Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1bd672e-16a5-494f-8e10-e10159f", "record_id": "flaws_cloudtrail:0000031:f1bd672e-16a5-494f-8e10-e10159f", "row_index": 31, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1bd672e-16a5-494f-8e10-e10159f", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.InvalidParameterValue", "errorMessage": "Value (dummy_data) for parameter attribute is invalid. Unknown attribute.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcId": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1fcbee5-4711-410b-b106-d2356e91e86b", "record_id": "flaws_cloudtrail:0000032:d1fcbee5-4711-410b-b106-d2356e91e86b", "row_index": 32, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVolumesModifications", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1fcbee5-4711-410b-b106-d2356e91e86b", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVolumesModifications", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVolumesModificationsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae173842-2dc4-4ea0-81c3-23c4cad2f3ee", "record_id": "flaws_cloudtrail:0000033:ae173842-2dc4-4ea0-81c3-23c4cad2f3ee", "row_index": 33, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcEndpointConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae173842-2dc4-4ea0-81c3-23c4cad2f3ee", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcEndpointConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointConnectionsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ac8fe9d-106b-42b0-9b41-c44e277b0a9b", "record_id": "flaws_cloudtrail:0000034:4ac8fe9d-106b-42b0-9b41-c44e277b0a9b", "row_index": 34, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcEndpointServicePermissions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ac8fe9d-106b-42b0-9b41-c44e277b0a9b", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcEndpointServicePermissions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointServicePermissionsRequest": {"ServiceId": "dummy_data"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d153374-afbd-4b6e-b86f-d36d2efefe95", "record_id": "flaws_cloudtrail:0000035:d153374-afbd-4b6e-b86f-d36d2efefe95", "row_index": 35, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcClassicLink", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d153374-afbd-4b6e-b86f-d36d2efefe95", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcClassicLink", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f01485-b306-4049-998c-4aec32c158cb", "record_id": "flaws_cloudtrail:0000036:9f01485-b306-4049-998c-4aec32c158cb", "row_index": 36, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcEndpointServiceConfigurations", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f01485-b306-4049-998c-4aec32c158cb", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcEndpointServiceConfigurations", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointServiceConfigurationsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a1140f2-ae7a-4bf8-a7dc-0a13903f6d84", "record_id": "flaws_cloudtrail:0000037:4a1140f2-ae7a-4bf8-a7dc-0a13903f6d84", "row_index": 37, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcEndpointConnectionNotifications", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a1140f2-ae7a-4bf8-a7dc-0a13903f6d84", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcEndpointConnectionNotifications", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointConnectionNotificationsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "333178-060d-49be-8fca-f8169c14e2c2", "record_id": "flaws_cloudtrail:0000038:333178-060d-49be-8fca-f8169c14e2c2", "row_index": 38, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcClassicLinkDnsSupport", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "333178-060d-49be-8fca-f8169c14e2c2", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcClassicLinkDnsSupport", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcClassicLinkDnsSupportRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a16ddf59-e544-4b35-a417-0cced622eec9", "record_id": "flaws_cloudtrail:0000039:a16ddf59-e544-4b35-a417-0cced622eec9", "row_index": 39, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a16ddf59-e544-4b35-a417-0cced622eec9", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcId": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1bd672e-16a5-494f-8e10-e10159f", "record_id": "flaws_cloudtrail:0000040:f1bd672e-16a5-494f-8e10-e10159f", "row_index": 40, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1bd672e-16a5-494f-8e10-e10159f", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.InvalidParameterValue", "errorMessage": "Value (dummy_data) for parameter attribute is invalid. Unknown attribute.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcId": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1fcbee5-4711-410b-b106-d2356e91e86b", "record_id": "flaws_cloudtrail:0000041:d1fcbee5-4711-410b-b106-d2356e91e86b", "row_index": 41, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVolumesModifications", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1fcbee5-4711-410b-b106-d2356e91e86b", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVolumesModifications", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVolumesModificationsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae173842-2dc4-4ea0-81c3-23c4cad2f3ee", "record_id": "flaws_cloudtrail:0000042:ae173842-2dc4-4ea0-81c3-23c4cad2f3ee", "row_index": 42, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcEndpointConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae173842-2dc4-4ea0-81c3-23c4cad2f3ee", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcEndpointConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointConnectionsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ac8fe9d-106b-42b0-9b41-c44e277b0a9b", "record_id": "flaws_cloudtrail:0000043:4ac8fe9d-106b-42b0-9b41-c44e277b0a9b", "row_index": 43, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcEndpointServicePermissions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ac8fe9d-106b-42b0-9b41-c44e277b0a9b", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcEndpointServicePermissions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointServicePermissionsRequest": {"ServiceId": "dummy_data"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d153374-afbd-4b6e-b86f-d36d2efefe95", "record_id": "flaws_cloudtrail:0000044:d153374-afbd-4b6e-b86f-d36d2efefe95", "row_index": 44, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcClassicLink", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d153374-afbd-4b6e-b86f-d36d2efefe95", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcClassicLink", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f01485-b306-4049-998c-4aec32c158cb", "record_id": "flaws_cloudtrail:0000045:9f01485-b306-4049-998c-4aec32c158cb", "row_index": 45, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcEndpointServiceConfigurations", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f01485-b306-4049-998c-4aec32c158cb", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcEndpointServiceConfigurations", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointServiceConfigurationsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a1140f2-ae7a-4bf8-a7dc-0a13903f6d84", "record_id": "flaws_cloudtrail:0000046:4a1140f2-ae7a-4bf8-a7dc-0a13903f6d84", "row_index": 46, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcEndpointConnectionNotifications", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a1140f2-ae7a-4bf8-a7dc-0a13903f6d84", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcEndpointConnectionNotifications", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointConnectionNotificationsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "333178-060d-49be-8fca-f8169c14e2c2", "record_id": "flaws_cloudtrail:0000047:333178-060d-49be-8fca-f8169c14e2c2", "row_index": 47, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcClassicLinkDnsSupport", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "333178-060d-49be-8fca-f8169c14e2c2", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcClassicLinkDnsSupport", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcClassicLinkDnsSupportRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a16ddf59-e544-4b35-a417-0cced622eec9", "record_id": "flaws_cloudtrail:0000048:a16ddf59-e544-4b35-a417-0cced622eec9", "row_index": 48, "timestamp": "2019-05-27T21:19:56Z", "event_type": "DescribeVpcAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a16ddf59-e544-4b35-a417-0cced622eec9", "eventTime": "2019-05-27T21:19:56Z", "eventName": "DescribeVpcAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcId": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7011d553-6e11-43be-8924-d48d1701fafc", "record_id": "flaws_cloudtrail:0000049:7011d553-6e11-43be-8924-d48d1701fafc", "row_index": 49, "timestamp": "2019-05-27T21:19:57Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7011d553-6e11-43be-8924-d48d1701fafc", "eventTime": "2019-05-27T21:19:57Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93006cab-745c-4141-b77b-2d4e67f4e0ce", "record_id": "flaws_cloudtrail:0000050:93006cab-745c-4141-b77b-2d4e67f4e0ce", "row_index": 50, "timestamp": "2019-05-27T21:19:57Z", "event_type": "DescribeVpcEndpointServices", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93006cab-745c-4141-b77b-2d4e67f4e0ce", "eventTime": "2019-05-27T21:19:57Z", "eventName": "DescribeVpcEndpointServices", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointServicesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c664195-f4f2-4eda-87a5-04ba277d0b8f", "record_id": "flaws_cloudtrail:0000051:c664195-f4f2-4eda-87a5-04ba277d0b8f", "row_index": 51, "timestamp": "2019-05-27T21:19:57Z", "event_type": "GetConsoleOutput", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c664195-f4f2-4eda-87a5-04ba277d0b8f", "eventTime": "2019-05-27T21:19:57Z", "eventName": "GetConsoleOutput", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceId": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d027cee3-0fef-46a8-afa3-64b3867e141b", "record_id": "flaws_cloudtrail:0000052:d027cee3-0fef-46a8-afa3-64b3867e141b", "row_index": 52, "timestamp": "2019-05-27T21:19:57Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d027cee3-0fef-46a8-afa3-64b3867e141b", "eventTime": "2019-05-27T21:19:57Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e070778f5-a992-4fef-bd43-992bda480ba4", "record_id": "flaws_cloudtrail:0000053:e070778f5-a992-4fef-bd43-992bda480ba4", "row_index": 53, "timestamp": "2019-05-27T21:19:57Z", "event_type": "GetConsoleScreenshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e070778f5-a992-4fef-bd43-992bda480ba4", "eventTime": "2019-05-27T21:19:57Z", "eventName": "GetConsoleScreenshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.InvalidInstanceID.Malformed", "errorMessage": "Invalid id: \"dummy_data\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"GetConsoleScreenshotRequest": {"InstanceId": "dummy_data"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab3aec77-40af-4ee0-9a03-20ae43d3bfd5", "record_id": "flaws_cloudtrail:0000054:ab3aec77-40af-4ee0-9a03-20ae43d3bfd5", "row_index": 54, "timestamp": "2019-05-27T21:19:57Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab3aec77-40af-4ee0-9a03-20ae43d3bfd5", "eventTime": "2019-05-27T21:19:57Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4598fd1d-5c11-47c3-a11c-1df8a9bb26a2", "record_id": "flaws_cloudtrail:0000055:4598fd1d-5c11-47c3-a11c-1df8a9bb26a2", "row_index": 55, "timestamp": "2019-05-27T21:19:57Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4598fd1d-5c11-47c3-a11c-1df8a9bb26a2", "eventTime": "2019-05-27T21:19:57Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "245ef918-1730-4634-b05b-99b44c695596", "record_id": "flaws_cloudtrail:0000056:245ef918-1730-4634-b05b-99b44c695596", "row_index": 56, "timestamp": "2019-05-27T21:19:57Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "245ef918-1730-4634-b05b-99b44c695596", "eventTime": "2019-05-27T21:19:57Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7011d553-6e11-43be-8924-d48d1701fafc", "record_id": "flaws_cloudtrail:0000057:7011d553-6e11-43be-8924-d48d1701fafc", "row_index": 57, "timestamp": "2019-05-27T21:19:57Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7011d553-6e11-43be-8924-d48d1701fafc", "eventTime": "2019-05-27T21:19:57Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93006cab-745c-4141-b77b-2d4e67f4e0ce", "record_id": "flaws_cloudtrail:0000058:93006cab-745c-4141-b77b-2d4e67f4e0ce", "row_index": 58, "timestamp": "2019-05-27T21:19:57Z", "event_type": "DescribeVpcEndpointServices", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93006cab-745c-4141-b77b-2d4e67f4e0ce", "eventTime": "2019-05-27T21:19:57Z", "eventName": "DescribeVpcEndpointServices", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointServicesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c664195-f4f2-4eda-87a5-04ba277d0b8f", "record_id": "flaws_cloudtrail:0000059:c664195-f4f2-4eda-87a5-04ba277d0b8f", "row_index": 59, "timestamp": "2019-05-27T21:19:57Z", "event_type": "GetConsoleOutput", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c664195-f4f2-4eda-87a5-04ba277d0b8f", "eventTime": "2019-05-27T21:19:57Z", "eventName": "GetConsoleOutput", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceId": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d027cee3-0fef-46a8-afa3-64b3867e141b", "record_id": "flaws_cloudtrail:0000060:d027cee3-0fef-46a8-afa3-64b3867e141b", "row_index": 60, "timestamp": "2019-05-27T21:19:57Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d027cee3-0fef-46a8-afa3-64b3867e141b", "eventTime": "2019-05-27T21:19:57Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e070778f5-a992-4fef-bd43-992bda480ba4", "record_id": "flaws_cloudtrail:0000061:e070778f5-a992-4fef-bd43-992bda480ba4", "row_index": 61, "timestamp": "2019-05-27T21:19:57Z", "event_type": "GetConsoleScreenshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e070778f5-a992-4fef-bd43-992bda480ba4", "eventTime": "2019-05-27T21:19:57Z", "eventName": "GetConsoleScreenshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.InvalidInstanceID.Malformed", "errorMessage": "Invalid id: \"dummy_data\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"GetConsoleScreenshotRequest": {"InstanceId": "dummy_data"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab3aec77-40af-4ee0-9a03-20ae43d3bfd5", "record_id": "flaws_cloudtrail:0000062:ab3aec77-40af-4ee0-9a03-20ae43d3bfd5", "row_index": 62, "timestamp": "2019-05-27T21:19:57Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab3aec77-40af-4ee0-9a03-20ae43d3bfd5", "eventTime": "2019-05-27T21:19:57Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4598fd1d-5c11-47c3-a11c-1df8a9bb26a2", "record_id": "flaws_cloudtrail:0000063:4598fd1d-5c11-47c3-a11c-1df8a9bb26a2", "row_index": 63, "timestamp": "2019-05-27T21:19:57Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4598fd1d-5c11-47c3-a11c-1df8a9bb26a2", "eventTime": "2019-05-27T21:19:57Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "245ef918-1730-4634-b05b-99b44c695596", "record_id": "flaws_cloudtrail:0000064:245ef918-1730-4634-b05b-99b44c695596", "row_index": 64, "timestamp": "2019-05-27T21:19:57Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "245ef918-1730-4634-b05b-99b44c695596", "eventTime": "2019-05-27T21:19:57Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28ac0d60-1d2b-446d-9faa-4bf7ff959bca", "record_id": "flaws_cloudtrail:0000065:28ac0d60-1d2b-446d-9faa-4bf7ff959bca", "row_index": 65, "timestamp": "2019-05-27T21:19:58Z", "event_type": "GetHostReservationPurchasePreview", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28ac0d60-1d2b-446d-9faa-4bf7ff959bca", "eventTime": "2019-05-27T21:19:58Z", "eventName": "GetHostReservationPurchasePreview", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"GetHostReservationPurchasePreviewRequest": {"HostIdSet": {"tag": 1, "content": "test"}, "OfferingId": "dummy_data"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a8bbc46-a935-4d39-a127-1f948a92e4ea", "record_id": "flaws_cloudtrail:0000066:4a8bbc46-a935-4d39-a127-1f948a92e4ea", "row_index": 66, "timestamp": "2019-05-27T21:19:58Z", "event_type": "GetReservedInstancesExchangeQuote", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a8bbc46-a935-4d39-a127-1f948a92e4ea", "eventTime": "2019-05-27T21:19:58Z", "eventName": "GetReservedInstancesExchangeQuote", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"GetReservedInstancesExchangeQuoteRequest": {"ReservedInstanceId": {"tag": 1, "content": "test"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a4b80ee-9e48-4649-b200-ce8aa148870", "record_id": "flaws_cloudtrail:0000067:7a4b80ee-9e48-4649-b200-ce8aa148870", "row_index": 67, "timestamp": "2019-05-27T21:19:58Z", "event_type": "GetLaunchTemplateData", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a4b80ee-9e48-4649-b200-ce8aa148870", "eventTime": "2019-05-27T21:19:58Z", "eventName": "GetLaunchTemplateData", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"GetLaunchTemplateDataRequest": {"InstanceId": "dummy_data"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4022d32-b692-4709-b2e6-14fbe11a037e", "record_id": "flaws_cloudtrail:0000068:e4022d32-b692-4709-b2e6-14fbe11a037e", "row_index": 68, "timestamp": "2019-05-27T21:19:58Z", "event_type": "GetPasswordData", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4022d32-b692-4709-b2e6-14fbe11a037e", "eventTime": "2019-05-27T21:19:58Z", "eventName": "GetPasswordData", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceId": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c18466-c9c8-4ca1-84c6-96518d017a3f", "record_id": "flaws_cloudtrail:0000069:9c18466-c9c8-4ca1-84c6-96518d017a3f", "row_index": 69, "timestamp": "2019-05-27T21:19:58Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c18466-c9c8-4ca1-84c6-96518d017a3f", "eventTime": "2019-05-27T21:19:58Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28ac0d60-1d2b-446d-9faa-4bf7ff959bca", "record_id": "flaws_cloudtrail:0000070:28ac0d60-1d2b-446d-9faa-4bf7ff959bca", "row_index": 70, "timestamp": "2019-05-27T21:19:58Z", "event_type": "GetHostReservationPurchasePreview", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28ac0d60-1d2b-446d-9faa-4bf7ff959bca", "eventTime": "2019-05-27T21:19:58Z", "eventName": "GetHostReservationPurchasePreview", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"GetHostReservationPurchasePreviewRequest": {"HostIdSet": {"tag": 1, "content": "test"}, "OfferingId": "dummy_data"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a8bbc46-a935-4d39-a127-1f948a92e4ea", "record_id": "flaws_cloudtrail:0000071:4a8bbc46-a935-4d39-a127-1f948a92e4ea", "row_index": 71, "timestamp": "2019-05-27T21:19:58Z", "event_type": "GetReservedInstancesExchangeQuote", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a8bbc46-a935-4d39-a127-1f948a92e4ea", "eventTime": "2019-05-27T21:19:58Z", "eventName": "GetReservedInstancesExchangeQuote", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"GetReservedInstancesExchangeQuoteRequest": {"ReservedInstanceId": {"tag": 1, "content": "test"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a4b80ee-9e48-4649-b200-ce8aa148870", "record_id": "flaws_cloudtrail:0000072:7a4b80ee-9e48-4649-b200-ce8aa148870", "row_index": 72, "timestamp": "2019-05-27T21:19:58Z", "event_type": "GetLaunchTemplateData", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a4b80ee-9e48-4649-b200-ce8aa148870", "eventTime": "2019-05-27T21:19:58Z", "eventName": "GetLaunchTemplateData", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"GetLaunchTemplateDataRequest": {"InstanceId": "dummy_data"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4022d32-b692-4709-b2e6-14fbe11a037e", "record_id": "flaws_cloudtrail:0000073:e4022d32-b692-4709-b2e6-14fbe11a037e", "row_index": 73, "timestamp": "2019-05-27T21:19:58Z", "event_type": "GetPasswordData", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4022d32-b692-4709-b2e6-14fbe11a037e", "eventTime": "2019-05-27T21:19:58Z", "eventName": "GetPasswordData", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceId": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c18466-c9c8-4ca1-84c6-96518d017a3f", "record_id": "flaws_cloudtrail:0000074:9c18466-c9c8-4ca1-84c6-96518d017a3f", "row_index": 74, "timestamp": "2019-05-27T21:19:58Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c18466-c9c8-4ca1-84c6-96518d017a3f", "eventTime": "2019-05-27T21:19:58Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "315167aba-8715-4f09-a078-0461f97df140", "record_id": "flaws_cloudtrail:0000075:315167aba-8715-4f09-a078-0461f97df140", "row_index": 75, "timestamp": "2019-05-27T21:19:59Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "315167aba-8715-4f09-a078-0461f97df140", "eventTime": "2019-05-27T21:19:59Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.amazonaws.com"], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d3fdc5c-e028-4825-81ae-c783ecd0a47b", "record_id": "flaws_cloudtrail:0000076:0d3fdc5c-e028-4825-81ae-c783ecd0a47b", "row_index": 76, "timestamp": "2019-05-27T21:19:59Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 926, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d3fdc5c-e028-4825-81ae-c783ecd0a47b", "eventTime": "2019-05-27T21:19:59Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "dummy_data", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a55b8455-f868-40a2-8263-4ba4c311fdc2", "record_id": "flaws_cloudtrail:0000077:a55b8455-f868-40a2-8263-4ba4c311fdc2", "row_index": 77, "timestamp": "2019-05-27T21:19:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a55b8455-f868-40a2-8263-4ba4c311fdc2", "eventTime": "2019-05-27T21:19:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "dummy_data", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49f71df4-3edd-4531-9d2f-2063d6af9669", "record_id": "flaws_cloudtrail:0000078:49f71df4-3edd-4531-9d2f-2063d6af9669", "row_index": 78, "timestamp": "2019-05-27T21:19:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49f71df4-3edd-4531-9d2f-2063d6af9669", "eventTime": "2019-05-27T21:19:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c22f6a4-a4a4-4853-bef8-06e46a5b08f6", "record_id": "flaws_cloudtrail:0000079:2c22f6a4-a4a4-4853-bef8-06e46a5b08f6", "row_index": 79, "timestamp": "2019-05-27T21:19:59Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 957, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c22f6a4-a4a4-4853-bef8-06e46a5b08f6", "eventTime": "2019-05-27T21:19:59Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14c32045-a30b-4b18-b754-462f31d0d56b", "record_id": "flaws_cloudtrail:0000080:14c32045-a30b-4b18-b754-462f31d0d56b", "row_index": 80, "timestamp": "2019-05-27T21:19:59Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14c32045-a30b-4b18-b754-462f31d0d56b", "eventTime": "2019-05-27T21:19:59Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "315167aba-8715-4f09-a078-0461f97df140", "record_id": "flaws_cloudtrail:0000081:315167aba-8715-4f09-a078-0461f97df140", "row_index": 81, "timestamp": "2019-05-27T21:19:59Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "315167aba-8715-4f09-a078-0461f97df140", "eventTime": "2019-05-27T21:19:59Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.amazonaws.com"], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d3fdc5c-e028-4825-81ae-c783ecd0a47b", "record_id": "flaws_cloudtrail:0000082:0d3fdc5c-e028-4825-81ae-c783ecd0a47b", "row_index": 82, "timestamp": "2019-05-27T21:19:59Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 926, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d3fdc5c-e028-4825-81ae-c783ecd0a47b", "eventTime": "2019-05-27T21:19:59Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "dummy_data", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a55b8455-f868-40a2-8263-4ba4c311fdc2", "record_id": "flaws_cloudtrail:0000083:a55b8455-f868-40a2-8263-4ba4c311fdc2", "row_index": 83, "timestamp": "2019-05-27T21:19:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a55b8455-f868-40a2-8263-4ba4c311fdc2", "eventTime": "2019-05-27T21:19:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "dummy_data", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49f71df4-3edd-4531-9d2f-2063d6af9669", "record_id": "flaws_cloudtrail:0000084:49f71df4-3edd-4531-9d2f-2063d6af9669", "row_index": 84, "timestamp": "2019-05-27T21:19:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49f71df4-3edd-4531-9d2f-2063d6af9669", "eventTime": "2019-05-27T21:19:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c22f6a4-a4a4-4853-bef8-06e46a5b08f6", "record_id": "flaws_cloudtrail:0000085:2c22f6a4-a4a4-4853-bef8-06e46a5b08f6", "row_index": 85, "timestamp": "2019-05-27T21:19:59Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 957, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c22f6a4-a4a4-4853-bef8-06e46a5b08f6", "eventTime": "2019-05-27T21:19:59Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14c32045-a30b-4b18-b754-462f31d0d56b", "record_id": "flaws_cloudtrail:0000086:14c32045-a30b-4b18-b754-462f31d0d56b", "row_index": 86, "timestamp": "2019-05-27T21:19:59Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14c32045-a30b-4b18-b754-462f31d0d56b", "eventTime": "2019-05-27T21:19:59Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad309abf-0fb9-4018-940b-c435adac609e", "record_id": "flaws_cloudtrail:0000087:ad309abf-0fb9-4018-940b-c435adac609e", "row_index": 87, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad309abf-0fb9-4018-940b-c435adac609e", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"lifecycle": [""], "host": ["s3.amazonaws.com"], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65bf9887-aba4-4192-a476-94e98d40020", "record_id": "flaws_cloudtrail:0000088:65bf9887-aba4-4192-a476-94e98d40020", "row_index": 88, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65bf9887-aba4-4192-a476-94e98d40020", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "logging": [""], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11c43c5f-80d8-4dad-861d-8e02d75c0875", "record_id": "flaws_cloudtrail:0000089:11c43c5f-80d8-4dad-861d-8e02d75c0875", "row_index": 89, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11c43c5f-80d8-4dad-861d-8e02d75c0875", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"lifecycle": [""], "host": ["s3.amazonaws.com"], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdfe8f8e-c93b-4486-9510-fc12cb344c46", "record_id": "flaws_cloudtrail:0000090:bdfe8f8e-c93b-4486-9510-fc12cb344c46", "row_index": 90, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 933, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdfe8f8e-c93b-4486-9510-fc12cb344c46", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "dummy_data", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c28ac68-ed92-4396-ba91-da8c6de5e68b", "record_id": "flaws_cloudtrail:0000091:2c28ac68-ed92-4396-ba91-da8c6de5e68b", "row_index": 91, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c28ac68-ed92-4396-ba91-da8c6de5e68b", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac3440e9-dba1-4122-b676-d8c674454ace7", "record_id": "flaws_cloudtrail:0000092:ac3440e9-dba1-4122-b676-d8c674454ace7", "row_index": 92, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 962, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac3440e9-dba1-4122-b676-d8c674454ace7", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32a2857f-b03f-4a3f-8354-39ae684db04f", "record_id": "flaws_cloudtrail:0000093:32a2857f-b03f-4a3f-8354-39ae684db04f", "row_index": 93, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32a2857f-b03f-4a3f-8354-39ae684db04f", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52c8d647-4981-49ca-827a-b47d787e469a", "record_id": "flaws_cloudtrail:0000094:52c8d647-4981-49ca-827a-b47d787e469a", "row_index": 94, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52c8d647-4981-49ca-827a-b47d787e469a", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad309abf-0fb9-4018-940b-c435adac609e", "record_id": "flaws_cloudtrail:0000095:ad309abf-0fb9-4018-940b-c435adac609e", "row_index": 95, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad309abf-0fb9-4018-940b-c435adac609e", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"lifecycle": [""], "host": ["s3.amazonaws.com"], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65bf9887-aba4-4192-a476-94e98d40020", "record_id": "flaws_cloudtrail:0000096:65bf9887-aba4-4192-a476-94e98d40020", "row_index": 96, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65bf9887-aba4-4192-a476-94e98d40020", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "logging": [""], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11c43c5f-80d8-4dad-861d-8e02d75c0875", "record_id": "flaws_cloudtrail:0000097:11c43c5f-80d8-4dad-861d-8e02d75c0875", "row_index": 97, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11c43c5f-80d8-4dad-861d-8e02d75c0875", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"lifecycle": [""], "host": ["s3.amazonaws.com"], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdfe8f8e-c93b-4486-9510-fc12cb344c46", "record_id": "flaws_cloudtrail:0000098:bdfe8f8e-c93b-4486-9510-fc12cb344c46", "row_index": 98, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 933, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdfe8f8e-c93b-4486-9510-fc12cb344c46", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "dummy_data", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c28ac68-ed92-4396-ba91-da8c6de5e68b", "record_id": "flaws_cloudtrail:0000099:2c28ac68-ed92-4396-ba91-da8c6de5e68b", "row_index": 99, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c28ac68-ed92-4396-ba91-da8c6de5e68b", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac3440e9-dba1-4122-b676-d8c674454ace7", "record_id": "flaws_cloudtrail:0000100:ac3440e9-dba1-4122-b676-d8c674454ace7", "row_index": 100, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 962, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac3440e9-dba1-4122-b676-d8c674454ace7", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32a2857f-b03f-4a3f-8354-39ae684db04f", "record_id": "flaws_cloudtrail:0000101:32a2857f-b03f-4a3f-8354-39ae684db04f", "row_index": 101, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32a2857f-b03f-4a3f-8354-39ae684db04f", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52c8d647-4981-49ca-827a-b47d787e469a", "record_id": "flaws_cloudtrail:0000102:52c8d647-4981-49ca-827a-b47d787e469a", "row_index": 102, "timestamp": "2019-05-27T21:20:00Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52c8d647-4981-49ca-827a-b47d787e469a", "eventTime": "2019-05-27T21:20:00Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5bf54e7-ba45-439b-91e1-49f92e41253", "record_id": "flaws_cloudtrail:0000103:b5bf54e7-ba45-439b-91e1-49f92e41253", "row_index": 103, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5bf54e7-ba45-439b-91e1-49f92e41253", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "dummy_data", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffbdbfde-24cb-4da7-afdc-72dcdf9af7ff", "record_id": "flaws_cloudtrail:0000104:ffbdbfde-24cb-4da7-afdc-72dcdf9af7ff", "row_index": 104, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffbdbfde-24cb-4da7-afdc-72dcdf9af7ff", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "tagging": [""], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1e5b39c-300b-4278-ac49-45db5d6a3748", "record_id": "flaws_cloudtrail:0000105:d1e5b39c-300b-4278-ac49-45db5d6a3748", "row_index": 105, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1e5b39c-300b-4278-ac49-45db5d6a3748", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "notification": [""], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54082c1e-8cdf-46f1-8452-db1cda29d58a", "record_id": "flaws_cloudtrail:0000106:54082c1e-8cdf-46f1-8452-db1cda29d58a", "row_index": 106, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54082c1e-8cdf-46f1-8452-db1cda29d58a", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "dummy_data", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cff2044d-5c5e-451c-b5f6-fac858e226006", "record_id": "flaws_cloudtrail:0000107:cff2044d-5c5e-451c-b5f6-fac858e226006", "row_index": 107, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cff2044d-5c5e-451c-b5f6-fac858e226006", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"replication": [""], "host": ["s3.amazonaws.com"], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39e99f00-56c4-4a01-a910-8678f52651c", "record_id": "flaws_cloudtrail:0000108:39e99f00-56c4-4a01-a910-8678f52651c", "row_index": 108, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39e99f00-56c4-4a01-a910-8678f52651c", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "notification": [""], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b30dfb7-927b-43dc-9da7-ccb0b0a2d562", "record_id": "flaws_cloudtrail:0000109:2b30dfb7-927b-43dc-9da7-ccb0b0a2d562", "row_index": 109, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 962, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b30dfb7-927b-43dc-9da7-ccb0b0a2d562", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fa6c957-88fb-4c0f-9fb6-ed9a1cd08ed8", "record_id": "flaws_cloudtrail:0000110:6fa6c957-88fb-4c0f-9fb6-ed9a1cd08ed8", "row_index": 110, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fa6c957-88fb-4c0f-9fb6-ed9a1cd08ed8", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfc3866a-3648-423e-8947-483c8cd8328c", "record_id": "flaws_cloudtrail:0000111:dfc3866a-3648-423e-8947-483c8cd8328c", "row_index": 111, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfc3866a-3648-423e-8947-483c8cd8328c", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2bcfabd-97fa-41c9-a509-fb29f44087e6", "record_id": "flaws_cloudtrail:0000112:e2bcfabd-97fa-41c9-a509-fb29f44087e6", "row_index": 112, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2bcfabd-97fa-41c9-a509-fb29f44087e6", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cd33765-929f-40d9-98d4-041aa4a80380", "record_id": "flaws_cloudtrail:0000113:4cd33765-929f-40d9-98d4-041aa4a80380", "row_index": 113, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cd33765-929f-40d9-98d4-041aa4a80380", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a666db46-f512-4818-964e-8b3f9349aec6", "record_id": "flaws_cloudtrail:0000114:a666db46-f512-4818-964e-8b3f9349aec6", "row_index": 114, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a666db46-f512-4818-964e-8b3f9349aec6", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5bf54e7-ba45-439b-91e1-49f92e41253", "record_id": "flaws_cloudtrail:0000115:b5bf54e7-ba45-439b-91e1-49f92e41253", "row_index": 115, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5bf54e7-ba45-439b-91e1-49f92e41253", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "dummy_data", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffbdbfde-24cb-4da7-afdc-72dcdf9af7ff", "record_id": "flaws_cloudtrail:0000116:ffbdbfde-24cb-4da7-afdc-72dcdf9af7ff", "row_index": 116, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffbdbfde-24cb-4da7-afdc-72dcdf9af7ff", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "tagging": [""], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1e5b39c-300b-4278-ac49-45db5d6a3748", "record_id": "flaws_cloudtrail:0000117:d1e5b39c-300b-4278-ac49-45db5d6a3748", "row_index": 117, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1e5b39c-300b-4278-ac49-45db5d6a3748", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "notification": [""], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54082c1e-8cdf-46f1-8452-db1cda29d58a", "record_id": "flaws_cloudtrail:0000118:54082c1e-8cdf-46f1-8452-db1cda29d58a", "row_index": 118, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54082c1e-8cdf-46f1-8452-db1cda29d58a", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "dummy_data", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cff2044d-5c5e-451c-b5f6-fac858e226006", "record_id": "flaws_cloudtrail:0000119:cff2044d-5c5e-451c-b5f6-fac858e226006", "row_index": 119, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cff2044d-5c5e-451c-b5f6-fac858e226006", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"replication": [""], "host": ["s3.amazonaws.com"], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39e99f00-56c4-4a01-a910-8678f52651c", "record_id": "flaws_cloudtrail:0000120:39e99f00-56c4-4a01-a910-8678f52651c", "row_index": 120, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39e99f00-56c4-4a01-a910-8678f52651c", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "notification": [""], "bucketName": "dummy_data"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b30dfb7-927b-43dc-9da7-ccb0b0a2d562", "record_id": "flaws_cloudtrail:0000121:2b30dfb7-927b-43dc-9da7-ccb0b0a2d562", "row_index": 121, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 962, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b30dfb7-927b-43dc-9da7-ccb0b0a2d562", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fa6c957-88fb-4c0f-9fb6-ed9a1cd08ed8", "record_id": "flaws_cloudtrail:0000122:6fa6c957-88fb-4c0f-9fb6-ed9a1cd08ed8", "row_index": 122, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fa6c957-88fb-4c0f-9fb6-ed9a1cd08ed8", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfc3866a-3648-423e-8947-483c8cd8328c", "record_id": "flaws_cloudtrail:0000123:dfc3866a-3648-423e-8947-483c8cd8328c", "row_index": 123, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfc3866a-3648-423e-8947-483c8cd8328c", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2bcfabd-97fa-41c9-a509-fb29f44087e6", "record_id": "flaws_cloudtrail:0000124:e2bcfabd-97fa-41c9-a509-fb29f44087e6", "row_index": 124, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2bcfabd-97fa-41c9-a509-fb29f44087e6", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cd33765-929f-40d9-98d4-041aa4a80380", "record_id": "flaws_cloudtrail:0000125:4cd33765-929f-40d9-98d4-041aa4a80380", "row_index": 125, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cd33765-929f-40d9-98d4-041aa4a80380", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a666db46-f512-4818-964e-8b3f9349aec6", "record_id": "flaws_cloudtrail:0000126:a666db46-f512-4818-964e-8b3f9349aec6", "row_index": 126, "timestamp": "2019-05-27T21:20:01Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a666db46-f512-4818-964e-8b3f9349aec6", "eventTime": "2019-05-27T21:20:01Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2494a324-801d-4a50-8da2-a0b378248c01", "record_id": "flaws_cloudtrail:0000127:2494a324-801d-4a50-8da2-a0b378248c01", "row_index": 127, "timestamp": "2019-05-27T21:20:02Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2494a324-801d-4a50-8da2-a0b378248c01", "eventTime": "2019-05-27T21:20:02Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5046b42-1526-4ce3-9d56-68d86d0a578b", "record_id": "flaws_cloudtrail:0000128:b5046b42-1526-4ce3-9d56-68d86d0a578b", "row_index": 128, "timestamp": "2019-05-27T21:20:02Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 933, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5046b42-1526-4ce3-9d56-68d86d0a578b", "eventTime": "2019-05-27T21:20:02Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "dummy_data", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89abe4bd-e3fa-4027-9fcf-ee47b7f8d155", "record_id": "flaws_cloudtrail:0000129:89abe4bd-e3fa-4027-9fcf-ee47b7f8d155", "row_index": 129, "timestamp": "2019-05-27T21:20:02Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89abe4bd-e3fa-4027-9fcf-ee47b7f8d155", "eventTime": "2019-05-27T21:20:02Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "dummy_data", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6196e59d-7536-4866-b177-941f2b203cae", "record_id": "flaws_cloudtrail:0000130:6196e59d-7536-4866-b177-941f2b203cae", "row_index": 130, "timestamp": "2019-05-27T21:20:02Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 962, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6196e59d-7536-4866-b177-941f2b203cae", "eventTime": "2019-05-27T21:20:02Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4df3d3c8-c438-43da-bf03-06a719c331b2", "record_id": "flaws_cloudtrail:0000131:4df3d3c8-c438-43da-bf03-06a719c331b2", "row_index": 131, "timestamp": "2019-05-27T21:20:02Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4df3d3c8-c438-43da-bf03-06a719c331b2", "eventTime": "2019-05-27T21:20:02Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2494a324-801d-4a50-8da2-a0b378248c01", "record_id": "flaws_cloudtrail:0000132:2494a324-801d-4a50-8da2-a0b378248c01", "row_index": 132, "timestamp": "2019-05-27T21:20:02Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2494a324-801d-4a50-8da2-a0b378248c01", "eventTime": "2019-05-27T21:20:02Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5046b42-1526-4ce3-9d56-68d86d0a578b", "record_id": "flaws_cloudtrail:0000133:b5046b42-1526-4ce3-9d56-68d86d0a578b", "row_index": 133, "timestamp": "2019-05-27T21:20:02Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 933, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5046b42-1526-4ce3-9d56-68d86d0a578b", "eventTime": "2019-05-27T21:20:02Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "dummy_data", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89abe4bd-e3fa-4027-9fcf-ee47b7f8d155", "record_id": "flaws_cloudtrail:0000134:89abe4bd-e3fa-4027-9fcf-ee47b7f8d155", "row_index": 134, "timestamp": "2019-05-27T21:20:02Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89abe4bd-e3fa-4027-9fcf-ee47b7f8d155", "eventTime": "2019-05-27T21:20:02Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "dummy_data", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6196e59d-7536-4866-b177-941f2b203cae", "record_id": "flaws_cloudtrail:0000135:6196e59d-7536-4866-b177-941f2b203cae", "row_index": 135, "timestamp": "2019-05-27T21:20:02Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 962, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6196e59d-7536-4866-b177-941f2b203cae", "eventTime": "2019-05-27T21:20:02Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4df3d3c8-c438-43da-bf03-06a719c331b2", "record_id": "flaws_cloudtrail:0000136:4df3d3c8-c438-43da-bf03-06a719c331b2", "row_index": 136, "timestamp": "2019-05-27T21:20:02Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4df3d3c8-c438-43da-bf03-06a719c331b2", "eventTime": "2019-05-27T21:20:02Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13e8a176-6bbc-46e5-9cd5-646963b808354", "record_id": "flaws_cloudtrail:0000137:13e8a176-6bbc-46e5-9cd5-646963b808354", "row_index": 137, "timestamp": "2019-05-27T21:20:04Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13e8a176-6bbc-46e5-9cd5-646963b808354", "eventTime": "2019-05-27T21:20:04Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13e8a176-6bbc-46e5-9cd5-646963b808354", "record_id": "flaws_cloudtrail:0000138:13e8a176-6bbc-46e5-9cd5-646963b808354", "row_index": 138, "timestamp": "2019-05-27T21:20:04Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13e8a176-6bbc-46e5-9cd5-646963b808354", "eventTime": "2019-05-27T21:20:04Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1dd6721-a95c-4e9f-805d-0cfd4e66b5f7", "record_id": "flaws_cloudtrail:0000139:c1dd6721-a95c-4e9f-805d-0cfd4e66b5f7", "row_index": 139, "timestamp": "2019-05-27T21:21:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1dd6721-a95c-4e9f-805d-0cfd4e66b5f7", "eventTime": "2019-05-27T21:21:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1dd6721-a95c-4e9f-805d-0cfd4e66b5f7", "record_id": "flaws_cloudtrail:0000140:c1dd6721-a95c-4e9f-805d-0cfd4e66b5f7", "row_index": 140, "timestamp": "2019-05-27T21:21:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1dd6721-a95c-4e9f-805d-0cfd4e66b5f7", "eventTime": "2019-05-27T21:21:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "855351-99bd-4d03-ad01-64d19314be", "record_id": "flaws_cloudtrail:0000141:855351-99bd-4d03-ad01-64d19314be", "row_index": 141, "timestamp": "2019-05-27T21:21:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "855351-99bd-4d03-ad01-64d19314be", "eventTime": "2019-05-27T21:21:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYUk5scW1YZ0RjNnN2cGJQbzY1ZFpzRE5ScnRnWHp4b256YnRMeGVmMDIvbmFLblZYNElHN3RkbGZuQ2VrTDFMa3RKRWc2eFh6Ukt2eVRKYlZ4YjlTQ3JoVWVkeS9XTDBaTE13Tll5SzQrMmxqNlJCV3dWNnBmL3hTOVNldnF3b1BtNzMwcXVFaVpiZUEzVDVoVzcydzdDVVBDMFJSejgxQ2dZOCtyMFBjdHFHYkJncWg5UXZHbktTVXo2U1c3eEttcEZSM3g2MFExZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "855351-99bd-4d03-ad01-64d19314be", "record_id": "flaws_cloudtrail:0000142:855351-99bd-4d03-ad01-64d19314be", "row_index": 142, "timestamp": "2019-05-27T21:21:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "855351-99bd-4d03-ad01-64d19314be", "eventTime": "2019-05-27T21:21:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYUk5scW1YZ0RjNnN2cGJQbzY1ZFpzRE5ScnRnWHp4b256YnRMeGVmMDIvbmFLblZYNElHN3RkbGZuQ2VrTDFMa3RKRWc2eFh6Ukt2eVRKYlZ4YjlTQ3JoVWVkeS9XTDBaTE13Tll5SzQrMmxqNlJCV3dWNnBmL3hTOVNldnF3b1BtNzMwcXVFaVpiZUEzVDVoVzcydzdDVVBDMFJSejgxQ2dZOCtyMFBjdHFHYkJncWg5UXZHbktTVXo2U1c3eEttcEZSM3g2MFExZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba955fa0-67c1-40b8-ada4-5fbdfd6e6412", "record_id": "flaws_cloudtrail:0000143:ba955fa0-67c1-40b8-ada4-5fbdfd6e6412", "row_index": 143, "timestamp": "2019-05-27T21:21:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba955fa0-67c1-40b8-ada4-5fbdfd6e6412", "eventTime": "2019-05-27T21:21:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIZmV2UC9UMUF1SXBBdU1yRk1uS2dHK3hFSmhwKytOcVd1cUJpUXBhZkJxVnQ0elkwdXQvaW9TZ2tHeStHRU1ROFBTOFJ2RjlzZWx6V1hUQ1hxaTZjSTVYY1ZEM3hBR0c4WXZNOVM3djlzVkFIQUFycmI5MDRMYVZMaU9VY2VRZ1Vra3lGZmg0VlEwRHUrTDRmdEJDc2hjbkVHb1lVU0t5d3QvaW5mSkFXUnNORURzOWdQTHNZcmZ4MEErcmtwVlU5bFB0SXlySHZITEhYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba955fa0-67c1-40b8-ada4-5fbdfd6e6412", "record_id": "flaws_cloudtrail:0000144:ba955fa0-67c1-40b8-ada4-5fbdfd6e6412", "row_index": 144, "timestamp": "2019-05-27T21:21:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba955fa0-67c1-40b8-ada4-5fbdfd6e6412", "eventTime": "2019-05-27T21:21:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIZmV2UC9UMUF1SXBBdU1yRk1uS2dHK3hFSmhwKytOcVd1cUJpUXBhZkJxVnQ0elkwdXQvaW9TZ2tHeStHRU1ROFBTOFJ2RjlzZWx6V1hUQ1hxaTZjSTVYY1ZEM3hBR0c4WXZNOVM3djlzVkFIQUFycmI5MDRMYVZMaU9VY2VRZ1Vra3lGZmg0VlEwRHUrTDRmdEJDc2hjbkVHb1lVU0t5d3QvaW5mSkFXUnNORURzOWdQTHNZcmZ4MEErcmtwVlU5bFB0SXlySHZITEhYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e52d67c-25fe-4efa-bcfb-aa935f390488", "record_id": "flaws_cloudtrail:0000145:3e52d67c-25fe-4efa-bcfb-aa935f390488", "row_index": 145, "timestamp": "2019-05-27T21:21:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e52d67c-25fe-4efa-bcfb-aa935f390488", "eventTime": "2019-05-27T21:21:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwdFRpV2VVQzJRMnhOMW1CSTRscEtuWVNiOENrdnJjV09qK28rMHhDYjlDb1dnbG10bWRVMnh3cnBJcTFFNUh4bmRoMVlyVUJRVmxmMmh2a3NvSkU5bUZJeWFoMkQwYVVTQW1RTjdZY1hDTkZrSWNWODBYU3Jjb0FvV2paa3ZkTmNUUjlxbXljeHVaczhIVnVHenZzY05ucVNVSGV0ZUw2T25RWi9nNmhQWWpzRXBjZ0N2ZVBRazY1c2lvalYyc1VaN2dKcU9PYTFSbHR4Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e52d67c-25fe-4efa-bcfb-aa935f390488", "record_id": "flaws_cloudtrail:0000146:3e52d67c-25fe-4efa-bcfb-aa935f390488", "row_index": 146, "timestamp": "2019-05-27T21:21:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e52d67c-25fe-4efa-bcfb-aa935f390488", "eventTime": "2019-05-27T21:21:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwdFRpV2VVQzJRMnhOMW1CSTRscEtuWVNiOENrdnJjV09qK28rMHhDYjlDb1dnbG10bWRVMnh3cnBJcTFFNUh4bmRoMVlyVUJRVmxmMmh2a3NvSkU5bUZJeWFoMkQwYVVTQW1RTjdZY1hDTkZrSWNWODBYU3Jjb0FvV2paa3ZkTmNUUjlxbXljeHVaczhIVnVHenZzY05ucVNVSGV0ZUw2T25RWi9nNmhQWWpzRXBjZ0N2ZVBRazY1c2lvalYyc1VaN2dKcU9PYTFSbHR4Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9afc7344-eb84-4139-93e4-8c36fac080456", "record_id": "flaws_cloudtrail:0000147:9afc7344-eb84-4139-93e4-8c36fac080456", "row_index": 147, "timestamp": "2019-05-27T21:21:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9afc7344-eb84-4139-93e4-8c36fac080456", "eventTime": "2019-05-27T21:21:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZaTRQUDVJNmtYMzdLYURiYi9HNXVrL2pUQ0grb2ZDTjg1emxIb2p5eHBnVGNSQkZ3dTJMRlEwUXU3dkpNUHhNNUd0TzhpZHNuVVZqUk9KN0VpTmNyaDdwcDB4WkNIbVA2VDhPdTVlVHM4dlVxanMxb0drbSsyK01FeTNkc1pSYnF1M2V1STIxZndvZEkvUTI1aDdHMHZaZXlWNVIySldVeTVScC81azJHbnZxVzlDUGZRRmtnRXB0U1RsSHZCUnpzSjgyVzdWOUJlND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9afc7344-eb84-4139-93e4-8c36fac080456", "record_id": "flaws_cloudtrail:0000148:9afc7344-eb84-4139-93e4-8c36fac080456", "row_index": 148, "timestamp": "2019-05-27T21:21:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9afc7344-eb84-4139-93e4-8c36fac080456", "eventTime": "2019-05-27T21:21:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZaTRQUDVJNmtYMzdLYURiYi9HNXVrL2pUQ0grb2ZDTjg1emxIb2p5eHBnVGNSQkZ3dTJMRlEwUXU3dkpNUHhNNUd0TzhpZHNuVVZqUk9KN0VpTmNyaDdwcDB4WkNIbVA2VDhPdTVlVHM4dlVxanMxb0drbSsyK01FeTNkc1pSYnF1M2V1STIxZndvZEkvUTI1aDdHMHZaZXlWNVIySldVeTVScC81azJHbnZxVzlDUGZRRmtnRXB0U1RsSHZCUnpzSjgyVzdWOUJlND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb9a094a-f71b-47bc-803d-b6c7e7531bbe", "record_id": "flaws_cloudtrail:0000149:eb9a094a-f71b-47bc-803d-b6c7e7531bbe", "row_index": 149, "timestamp": "2019-05-27T21:21:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb9a094a-f71b-47bc-803d-b6c7e7531bbe", "eventTime": "2019-05-27T21:21:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCODNTc2hwTXhwOWNTdnBleVNBUXFEVzRSWlZYTExMVWQvdDdaaGxmeTV5U3pKUVc5WDN4OEdJVkhpMUo0dHRiZDk4ZSsyM3NxQkRLMTI0MHpiQUNDSXY5c2dHZWtmL2hGWXk4QkI0SmQxSU1uakpRR05tdHh6SWFiTzc1a1B2a2J6bXQ2V2J6ZkNqcUh0ZWlubXlHc0xOaHpkTjh4a3hPZDhTZ2dZUHNLM0taak45M0d5K1ZrMmNOOUxQOFhXSnQvZjN2N0NhUHY5QnR4UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb9a094a-f71b-47bc-803d-b6c7e7531bbe", "record_id": "flaws_cloudtrail:0000150:eb9a094a-f71b-47bc-803d-b6c7e7531bbe", "row_index": 150, "timestamp": "2019-05-27T21:21:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb9a094a-f71b-47bc-803d-b6c7e7531bbe", "eventTime": "2019-05-27T21:21:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCODNTc2hwTXhwOWNTdnBleVNBUXFEVzRSWlZYTExMVWQvdDdaaGxmeTV5U3pKUVc5WDN4OEdJVkhpMUo0dHRiZDk4ZSsyM3NxQkRLMTI0MHpiQUNDSXY5c2dHZWtmL2hGWXk4QkI0SmQxSU1uakpRR05tdHh6SWFiTzc1a1B2a2J6bXQ2V2J6ZkNqcUh0ZWlubXlHc0xOaHpkTjh4a3hPZDhTZ2dZUHNLM0taak45M0d5K1ZrMmNOOUxQOFhXSnQvZjN2N0NhUHY5QnR4UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39f17c24-5b22-4442-be3e-b5bbcf23fcdb", "record_id": "flaws_cloudtrail:0000151:39f17c24-5b22-4442-be3e-b5bbcf23fcdb", "row_index": 151, "timestamp": "2019-05-27T21:21:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39f17c24-5b22-4442-be3e-b5bbcf23fcdb", "eventTime": "2019-05-27T21:21:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSaSswVkRiM1h4dVNqUUlyaDlRNDZaOEJxbDdhb2dpMmEwRkcrQWo2eG5ieHVlaTg4SzZURXN2MDlOWkJJQ0pzQ3cycHlpYWJxRStCZXFWcFRBMVlYWlluYWRQWC8zZHpPa3VnSXhCYldzMDBrcjNFa05mcTRvbnIwWEVad3hTRFlwcGd4KytxcEw1bGFtMUFSZHloWHNvbzJmakFxQ2JhRkRWbDNILzEyOTEzSTNxVG1qY1RLaFZmTlpKcEZqNjlxV2t2N3VVeEM0ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39f17c24-5b22-4442-be3e-b5bbcf23fcdb", "record_id": "flaws_cloudtrail:0000152:39f17c24-5b22-4442-be3e-b5bbcf23fcdb", "row_index": 152, "timestamp": "2019-05-27T21:21:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39f17c24-5b22-4442-be3e-b5bbcf23fcdb", "eventTime": "2019-05-27T21:21:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSaSswVkRiM1h4dVNqUUlyaDlRNDZaOEJxbDdhb2dpMmEwRkcrQWo2eG5ieHVlaTg4SzZURXN2MDlOWkJJQ0pzQ3cycHlpYWJxRStCZXFWcFRBMVlYWlluYWRQWC8zZHpPa3VnSXhCYldzMDBrcjNFa05mcTRvbnIwWEVad3hTRFlwcGd4KytxcEw1bGFtMUFSZHloWHNvbzJmakFxQ2JhRkRWbDNILzEyOTEzSTNxVG1qY1RLaFZmTlpKcEZqNjlxV2t2N3VVeEM0ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98e4acc8-4a04-474f-ae07-06382fdc2a", "record_id": "flaws_cloudtrail:0000153:98e4acc8-4a04-474f-ae07-06382fdc2a", "row_index": 153, "timestamp": "2019-05-27T21:21:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98e4acc8-4a04-474f-ae07-06382fdc2a", "eventTime": "2019-05-27T21:21:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6OGhwTEdzNmkyaFdBa3l3RnVHbG5GdUEvT1ljNGx4M2tCeUVDZUFXQzM0SEZKTEdFU2FrSWJmbE5rK3JFalpqclJoOXExaTdXWVV6QThQL01QcDZDVlRYUmVqS2dTb0JUUVFzSkMyY1FSaUVLWkNCanJKVDRyd3I2NkxuT1B6VmpGak9pTjd3Sko5M3RYdEZYS2FIT285UVRabTRlY1hVTUV6bW1jQVoyRmNVa0FVSUtkbGJESGJNU2NrSHMvSG5nNXhTUStydFdDMWpjdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98e4acc8-4a04-474f-ae07-06382fdc2a", "record_id": "flaws_cloudtrail:0000154:98e4acc8-4a04-474f-ae07-06382fdc2a", "row_index": 154, "timestamp": "2019-05-27T21:21:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98e4acc8-4a04-474f-ae07-06382fdc2a", "eventTime": "2019-05-27T21:21:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6OGhwTEdzNmkyaFdBa3l3RnVHbG5GdUEvT1ljNGx4M2tCeUVDZUFXQzM0SEZKTEdFU2FrSWJmbE5rK3JFalpqclJoOXExaTdXWVV6QThQL01QcDZDVlRYUmVqS2dTb0JUUVFzSkMyY1FSaUVLWkNCanJKVDRyd3I2NkxuT1B6VmpGak9pTjd3Sko5M3RYdEZYS2FIT285UVRabTRlY1hVTUV6bW1jQVoyRmNVa0FVSUtkbGJESGJNU2NrSHMvSG5nNXhTUStydFdDMWpjdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22bd0248-356e-4833-888f-751beb9b6c01", "record_id": "flaws_cloudtrail:0000155:22bd0248-356e-4833-888f-751beb9b6c01", "row_index": 155, "timestamp": "2019-05-27T21:21:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22bd0248-356e-4833-888f-751beb9b6c01", "eventTime": "2019-05-27T21:21:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwTTRRRTFMRGp3SVVlSlRXTGpWZ2ZLaE1JSGZzcHVJbmppMlRMUVBoa0tDbUdyVm9pM0pzR0tLLzM5aythL2xJQ05sclRhcXN5ZWdVNnRoQ09yMVdyR29COTR0MElpU25OT0hmVkhjejFkOGZzV2x6ZllSLzB1U1ZEQ1Rrb3FZWmxzclVqdFhnRzAwWlFCNzJrUDlPc2VpalFTT1VIK0FBWHpBRlZ3RlphTDloS1doekZvTkNlamJxTDliZ3dyODVUejNjbDdKTUdyST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22bd0248-356e-4833-888f-751beb9b6c01", "record_id": "flaws_cloudtrail:0000156:22bd0248-356e-4833-888f-751beb9b6c01", "row_index": 156, "timestamp": "2019-05-27T21:21:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22bd0248-356e-4833-888f-751beb9b6c01", "eventTime": "2019-05-27T21:21:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwTTRRRTFMRGp3SVVlSlRXTGpWZ2ZLaE1JSGZzcHVJbmppMlRMUVBoa0tDbUdyVm9pM0pzR0tLLzM5aythL2xJQ05sclRhcXN5ZWdVNnRoQ09yMVdyR29COTR0MElpU25OT0hmVkhjejFkOGZzV2x6ZllSLzB1U1ZEQ1Rrb3FZWmxzclVqdFhnRzAwWlFCNzJrUDlPc2VpalFTT1VIK0FBWHpBRlZ3RlphTDloS1doekZvTkNlamJxTDliZ3dyODVUejNjbDdKTUdyST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c406371-74e7-4b0a-a73c-d45372513b5b", "record_id": "flaws_cloudtrail:0000157:7c406371-74e7-4b0a-a73c-d45372513b5b", "row_index": 157, "timestamp": "2019-05-27T21:21:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c406371-74e7-4b0a-a73c-d45372513b5b", "eventTime": "2019-05-27T21:21:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIreDE4YVlyVzU0R3QxMU11MEVMOTBFdStvbiswOVVFcTNmUStkWGxKK20yRFdTdEFBbVhXUU1jdnNuTlZhOVhBRFY3eERhckwvSitIM21BdXc4SGp2eEtOWi92ZFBTSURZN3FEQW1IbUpIMUpDZ01XU2EwOThpeUFMSGhtNUF2Ykt0VTJxemdmT00vR21JdmZyOWlkZjAycUROaHcwNTQ4bEZkdzU5S1RPakVSWXVFa3ltRktaOTRxdVY2WHM2dkZZSWxBWEp5QWpuRVZDZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c406371-74e7-4b0a-a73c-d45372513b5b", "record_id": "flaws_cloudtrail:0000158:7c406371-74e7-4b0a-a73c-d45372513b5b", "row_index": 158, "timestamp": "2019-05-27T21:21:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c406371-74e7-4b0a-a73c-d45372513b5b", "eventTime": "2019-05-27T21:21:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIreDE4YVlyVzU0R3QxMU11MEVMOTBFdStvbiswOVVFcTNmUStkWGxKK20yRFdTdEFBbVhXUU1jdnNuTlZhOVhBRFY3eERhckwvSitIM21BdXc4SGp2eEtOWi92ZFBTSURZN3FEQW1IbUpIMUpDZ01XU2EwOThpeUFMSGhtNUF2Ykt0VTJxemdmT00vR21JdmZyOWlkZjAycUROaHcwNTQ4bEZkdzU5S1RPakVSWXVFa3ltRktaOTRxdVY2WHM2dkZZSWxBWEp5QWpuRVZDZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b4a1e91-c219-4fe3-b613-98cd6460f7dc", "record_id": "flaws_cloudtrail:0000159:1b4a1e91-c219-4fe3-b613-98cd6460f7dc", "row_index": 159, "timestamp": "2019-05-27T21:21:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b4a1e91-c219-4fe3-b613-98cd6460f7dc", "eventTime": "2019-05-27T21:21:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVWEZ0MW1HRVNzREJDQ01xNWliUVBtRUE5bWdWT2M3QWwzWlRDc0R4bFFLZXJkdXM2a3BvU1FhUnFLRVFZRXkxUUJxeWVZVVRqNUUxaDRIenlQK2pWVHQzaU90UFpKK2RVeXVJb1VXSGJZT0tqdENEcHYvallKSnVzbW1DKzIwcnJ3cTlhWGpzQ3hTM2pDOHQ2Z2ZBV082ci8zK1JkQ016RXRRa3JGWS9KWXFGdDJINHEyZVBiL2k5YWphNmJFQm0zRjdJc2p5dHh0b0kiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b4a1e91-c219-4fe3-b613-98cd6460f7dc", "record_id": "flaws_cloudtrail:0000160:1b4a1e91-c219-4fe3-b613-98cd6460f7dc", "row_index": 160, "timestamp": "2019-05-27T21:21:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b4a1e91-c219-4fe3-b613-98cd6460f7dc", "eventTime": "2019-05-27T21:21:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVWEZ0MW1HRVNzREJDQ01xNWliUVBtRUE5bWdWT2M3QWwzWlRDc0R4bFFLZXJkdXM2a3BvU1FhUnFLRVFZRXkxUUJxeWVZVVRqNUUxaDRIenlQK2pWVHQzaU90UFpKK2RVeXVJb1VXSGJZT0tqdENEcHYvallKSnVzbW1DKzIwcnJ3cTlhWGpzQ3hTM2pDOHQ2Z2ZBV082ci8zK1JkQ016RXRRa3JGWS9KWXFGdDJINHEyZVBiL2k5YWphNmJFQm0zRjdJc2p5dHh0b0kiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0f7300b-94b1-4306-9c30-173b00a27c1e", "record_id": "flaws_cloudtrail:0000161:e0f7300b-94b1-4306-9c30-173b00a27c1e", "row_index": 161, "timestamp": "2019-05-27T21:21:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0f7300b-94b1-4306-9c30-173b00a27c1e", "eventTime": "2019-05-27T21:21:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYalcwMDltYmExVW41d3o1VlVyc2d2YkNGbk5CM0k1SHUzSWFyWUNkdXlTTjJnSkREcUpkMGNnVU5HQlJVYXloUGRCMXFuRi9pcTZOTm5aNGNvVml6ZHl2UDI5SklMUXpRMHVaTi8yeDlhRHhUck9tQmREVkZhMlY4UEtGVDZYOHltb2phclFSa0s3VzVIM3NjRUpwNjRWZjVhRHY2WldqRTJHdFZtYmNESEFhNWxGUldHRzZGcEViU29GNHhJQjBIMjZrSittejlzQXJlUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29ba48f5-ebef-4820-be81-849837d54d1", "record_id": "flaws_cloudtrail:0000162:29ba48f5-ebef-4820-be81-849837d54d1", "row_index": 162, "timestamp": "2019-05-27T21:21:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29ba48f5-ebef-4820-be81-849837d54d1", "eventTime": "2019-05-27T21:21:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2QUQ0Nk5aWFpIMW1qSnBaR3VWaElZMTNQQUVjQ0NwUXNZUDI1NzFrMVJWeHNsa3V2RkIzZFFjbDlzVWR1REZtU0cxWmhoN1dZK0U1UW92SndKSi9UeFZJak16ZXlKYnYySWY3SU9mZld3dGNEb0Y0QW82Sk1tL3o3NjY0ZDZNek1hRG83YmtnVGczOWdSRnVZdHZsZ3JNM3p2cU1OOFRldFFpc0lDUFpjMFhXTmp4cFI3UXFwUmw5bWh4K0l5Z2o4MXZobTFpa044ZTh6QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0f7300b-94b1-4306-9c30-173b00a27c1e", "record_id": "flaws_cloudtrail:0000163:e0f7300b-94b1-4306-9c30-173b00a27c1e", "row_index": 163, "timestamp": "2019-05-27T21:21:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0f7300b-94b1-4306-9c30-173b00a27c1e", "eventTime": "2019-05-27T21:21:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYalcwMDltYmExVW41d3o1VlVyc2d2YkNGbk5CM0k1SHUzSWFyWUNkdXlTTjJnSkREcUpkMGNnVU5HQlJVYXloUGRCMXFuRi9pcTZOTm5aNGNvVml6ZHl2UDI5SklMUXpRMHVaTi8yeDlhRHhUck9tQmREVkZhMlY4UEtGVDZYOHltb2phclFSa0s3VzVIM3NjRUpwNjRWZjVhRHY2WldqRTJHdFZtYmNESEFhNWxGUldHRzZGcEViU29GNHhJQjBIMjZrSittejlzQXJlUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29ba48f5-ebef-4820-be81-849837d54d1", "record_id": "flaws_cloudtrail:0000164:29ba48f5-ebef-4820-be81-849837d54d1", "row_index": 164, "timestamp": "2019-05-27T21:21:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29ba48f5-ebef-4820-be81-849837d54d1", "eventTime": "2019-05-27T21:21:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2QUQ0Nk5aWFpIMW1qSnBaR3VWaElZMTNQQUVjQ0NwUXNZUDI1NzFrMVJWeHNsa3V2RkIzZFFjbDlzVWR1REZtU0cxWmhoN1dZK0U1UW92SndKSi9UeFZJak16ZXlKYnYySWY3SU9mZld3dGNEb0Y0QW82Sk1tL3o3NjY0ZDZNek1hRG83YmtnVGczOWdSRnVZdHZsZ3JNM3p2cU1OOFRldFFpc0lDUFpjMFhXTmp4cFI3UXFwUmw5bWh4K0l5Z2o4MXZobTFpa044ZTh6QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08e0757c-b5e0-460b-83ab-bf44828375c3", "record_id": "flaws_cloudtrail:0000165:08e0757c-b5e0-460b-83ab-bf44828375c3", "row_index": 165, "timestamp": "2019-05-27T21:21:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08e0757c-b5e0-460b-83ab-bf44828375c3", "eventTime": "2019-05-27T21:21:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvblk1VEhNZC9mVmtNblB4NmN2ZVNEZUJ0YkJzMW1BWTBFaWRxVDFNdHVNRE9EbTgvNnZzcmlWYTY1VkhHbi9EekRJMWp2U1g1L0t0NXl5UFZ5RlV2QWRNTzBSaGxIbFlYbyt0c1dPMVRHYkVqR1RYOXFTSG9jUXZoZEpiWjZBR2Z2ZUdQU2p1TGxPV2dSc2dWTU1XaUl3Zm4wdzR2Q3l2Y1pzem9tYjZ6RkhDc04vWm56d3BzVmxMVUp0UFhVSmZSMGp5aDV6YUhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08e0757c-b5e0-460b-83ab-bf44828375c3", "record_id": "flaws_cloudtrail:0000166:08e0757c-b5e0-460b-83ab-bf44828375c3", "row_index": 166, "timestamp": "2019-05-27T21:21:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08e0757c-b5e0-460b-83ab-bf44828375c3", "eventTime": "2019-05-27T21:21:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvblk1VEhNZC9mVmtNblB4NmN2ZVNEZUJ0YkJzMW1BWTBFaWRxVDFNdHVNRE9EbTgvNnZzcmlWYTY1VkhHbi9EekRJMWp2U1g1L0t0NXl5UFZ5RlV2QWRNTzBSaGxIbFlYbyt0c1dPMVRHYkVqR1RYOXFTSG9jUXZoZEpiWjZBR2Z2ZUdQU2p1TGxPV2dSc2dWTU1XaUl3Zm4wdzR2Q3l2Y1pzem9tYjZ6RkhDc04vWm56d3BzVmxMVUp0UFhVSmZSMGp5aDV6YUhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d56cc0f-338f-4cad-9556-995bf0b092c8", "record_id": "flaws_cloudtrail:0000167:2d56cc0f-338f-4cad-9556-995bf0b092c8", "row_index": 167, "timestamp": "2019-05-27T21:21:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d56cc0f-338f-4cad-9556-995bf0b092c8", "eventTime": "2019-05-27T21:21:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRWUwxMDhwc2ZEZ1JacEQ3WFI3blNwOWJZc0lMRG9LVEV3K0xKditSOThQZEY1cmRsdDFsa0t0aksvam02UFFtQVh6SjlSY2NLWktOcHRQV1d6ZzFyZDQvdENweEt0WFBwanRXM0RjS0EzZXdFV052YkFKNGtucjc4c0hGV1NyM0VHcGx1emNzSzdvTVZXWmJ3dXdIMG1OMlNLQlliS0lJb0NLYXJtdnlYT1JZbXp6dWR2UW9idlFJMm1jMkZPOVIxeWJQRDdCTE9DWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d56cc0f-338f-4cad-9556-995bf0b092c8", "record_id": "flaws_cloudtrail:0000168:2d56cc0f-338f-4cad-9556-995bf0b092c8", "row_index": 168, "timestamp": "2019-05-27T21:21:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d56cc0f-338f-4cad-9556-995bf0b092c8", "eventTime": "2019-05-27T21:21:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRWUwxMDhwc2ZEZ1JacEQ3WFI3blNwOWJZc0lMRG9LVEV3K0xKditSOThQZEY1cmRsdDFsa0t0aksvam02UFFtQVh6SjlSY2NLWktOcHRQV1d6ZzFyZDQvdENweEt0WFBwanRXM0RjS0EzZXdFV052YkFKNGtucjc4c0hGV1NyM0VHcGx1emNzSzdvTVZXWmJ3dXdIMG1OMlNLQlliS0lJb0NLYXJtdnlYT1JZbXp6dWR2UW9idlFJMm1jMkZPOVIxeWJQRDdCTE9DWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e173409-8d53-49a7-a0f9-e805000af5f85", "record_id": "flaws_cloudtrail:0000169:1e173409-8d53-49a7-a0f9-e805000af5f85", "row_index": 169, "timestamp": "2019-05-27T21:21:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e173409-8d53-49a7-a0f9-e805000af5f85", "eventTime": "2019-05-27T21:21:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkVDRtbTZxeGJYZTZ1VkhBZk5oRzZDaTh5ZGxYVzUyZVpSVGpqRWh0QTVKVW9xdk9xZ3l4UVgyZ1JLeU83Q0wxbEVmNDVrMDZqaURSL1pzL2NYbDFJZU40YVczc0ltYTNoNGY5QzFLOCsvcDhhQitKNzh2RmFiUUI4UklQdENHWVBFZlJJVklyK0UxdURGUlA0MDBPSWpGWkZ1RDFYbE9PYklPWFJzQTdaWW5JN2lyRjVEbXcvOGdBUUhXRDBoc2lXNUtmWEJIWGNIWGlqZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "792ef7b6-5969-4bed-8d61-219acc9b8c03", "record_id": "flaws_cloudtrail:0000170:792ef7b6-5969-4bed-8d61-219acc9b8c03", "row_index": 170, "timestamp": "2019-05-27T21:21:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "792ef7b6-5969-4bed-8d61-219acc9b8c03", "eventTime": "2019-05-27T21:21:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWUGd5Rmp0U1pveUtObS9hQ0h4V1VXMTVFTm1LSmhVRkZLNlZOZlRyUEc4dllLYS93VTc2MmNJN2dtYXBJZzRpaE1QNjhWWllnS1AxSFYzQngrZjJOTUFORzdWZ2RpZUR1a3pqd2JjaVpFdG1pSUVrV0ZxMVNiRjY2NlVLdEpKd2x6cDdGMUdjMFZGdWZDQ3ZmdGdQWWxVWStaUWt5RmRDRmJrd1MxYkUralpPYkxPbzhydU5uQU50Y2ZRS2cxZ0tSRmdnamR1RmdnTGppZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e173409-8d53-49a7-a0f9-e805000af5f85", "record_id": "flaws_cloudtrail:0000171:1e173409-8d53-49a7-a0f9-e805000af5f85", "row_index": 171, "timestamp": "2019-05-27T21:21:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e173409-8d53-49a7-a0f9-e805000af5f85", "eventTime": "2019-05-27T21:21:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkVDRtbTZxeGJYZTZ1VkhBZk5oRzZDaTh5ZGxYVzUyZVpSVGpqRWh0QTVKVW9xdk9xZ3l4UVgyZ1JLeU83Q0wxbEVmNDVrMDZqaURSL1pzL2NYbDFJZU40YVczc0ltYTNoNGY5QzFLOCsvcDhhQitKNzh2RmFiUUI4UklQdENHWVBFZlJJVklyK0UxdURGUlA0MDBPSWpGWkZ1RDFYbE9PYklPWFJzQTdaWW5JN2lyRjVEbXcvOGdBUUhXRDBoc2lXNUtmWEJIWGNIWGlqZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "792ef7b6-5969-4bed-8d61-219acc9b8c03", "record_id": "flaws_cloudtrail:0000172:792ef7b6-5969-4bed-8d61-219acc9b8c03", "row_index": 172, "timestamp": "2019-05-27T21:21:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "792ef7b6-5969-4bed-8d61-219acc9b8c03", "eventTime": "2019-05-27T21:21:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWUGd5Rmp0U1pveUtObS9hQ0h4V1VXMTVFTm1LSmhVRkZLNlZOZlRyUEc4dllLYS93VTc2MmNJN2dtYXBJZzRpaE1QNjhWWllnS1AxSFYzQngrZjJOTUFORzdWZ2RpZUR1a3pqd2JjaVpFdG1pSUVrV0ZxMVNiRjY2NlVLdEpKd2x6cDdGMUdjMFZGdWZDQ3ZmdGdQWWxVWStaUWt5RmRDRmJrd1MxYkUralpPYkxPbzhydU5uQU50Y2ZRS2cxZ0tSRmdnamR1RmdnTGppZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa896bc5-4a1a-4a1a-b13a-b3815867e683", "record_id": "flaws_cloudtrail:0000173:aa896bc5-4a1a-4a1a-b13a-b3815867e683", "row_index": 173, "timestamp": "2019-05-27T21:21:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa896bc5-4a1a-4a1a-b13a-b3815867e683", "eventTime": "2019-05-27T21:21:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIN1RIbjlEci84TlIwa01uWlJGcjFjbkZYak9MNGlySjFaNzE1WnJiaGVDRnRYS3M1Zld0UDRTSjBUUlNJQ3JlWHM2UjBjNG5xc0pIOXQrN0J1VjJWUjUzRVg1VkVTc3FhNERTUk1HQjg5eUJTc3R0d3RWRHAyMjFEYXJZTTlxL0txZzRaM2cyQkEyd1dYdTE4WmJ4VVJQSkZ1cG9ETVJVQ241TmFMRlZpZ0FsTlZNY0dvRHhHbUg2QjVLQ3ppN2ZFVStHNlM4cndueFJXZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa896bc5-4a1a-4a1a-b13a-b3815867e683", "record_id": "flaws_cloudtrail:0000174:aa896bc5-4a1a-4a1a-b13a-b3815867e683", "row_index": 174, "timestamp": "2019-05-27T21:21:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa896bc5-4a1a-4a1a-b13a-b3815867e683", "eventTime": "2019-05-27T21:21:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIN1RIbjlEci84TlIwa01uWlJGcjFjbkZYak9MNGlySjFaNzE1WnJiaGVDRnRYS3M1Zld0UDRTSjBUUlNJQ3JlWHM2UjBjNG5xc0pIOXQrN0J1VjJWUjUzRVg1VkVTc3FhNERTUk1HQjg5eUJTc3R0d3RWRHAyMjFEYXJZTTlxL0txZzRaM2cyQkEyd1dYdTE4WmJ4VVJQSkZ1cG9ETVJVQ241TmFMRlZpZ0FsTlZNY0dvRHhHbUg2QjVLQ3ppN2ZFVStHNlM4cndueFJXZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f2f7d62-d23e-48b1-a445-87935b2a699", "record_id": "flaws_cloudtrail:0000175:6f2f7d62-d23e-48b1-a445-87935b2a699", "row_index": 175, "timestamp": "2019-05-27T21:21:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f2f7d62-d23e-48b1-a445-87935b2a699", "eventTime": "2019-05-27T21:21:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrem5aY0RBQUJKQVhvR0lJNGZ6T20yK2tWcFUyWU5rSHVoMlh1c1JPc3VNekVGdFFiT28vNy9CS0NZZ0tDejRIS2N0WnAyNEtGT1ZBUy9RUzhIL000SW14ZnFKT2ZPaW90bGdrZ0FtdzAvSE1aZUFnSzlIOENwdnFFTzNqRk92ek81MitXSyt5eTJZbGZnbms4Wk12SXJMWnlIdUNWSVdBM1QwVXUrT0syRlF6NVJxVmRIM2lpdEw4MERVMStWRjEwaWcrWm5VY1psaGxMZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f2f7d62-d23e-48b1-a445-87935b2a699", "record_id": "flaws_cloudtrail:0000176:6f2f7d62-d23e-48b1-a445-87935b2a699", "row_index": 176, "timestamp": "2019-05-27T21:21:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f2f7d62-d23e-48b1-a445-87935b2a699", "eventTime": "2019-05-27T21:21:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrem5aY0RBQUJKQVhvR0lJNGZ6T20yK2tWcFUyWU5rSHVoMlh1c1JPc3VNekVGdFFiT28vNy9CS0NZZ0tDejRIS2N0WnAyNEtGT1ZBUy9RUzhIL000SW14ZnFKT2ZPaW90bGdrZ0FtdzAvSE1aZUFnSzlIOENwdnFFTzNqRk92ek81MitXSyt5eTJZbGZnbms4Wk12SXJMWnlIdUNWSVdBM1QwVXUrT0syRlF6NVJxVmRIM2lpdEw4MERVMStWRjEwaWcrWm5VY1psaGxMZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "692378f-ee24-4c4c-b98e-9577b14cf8ce", "record_id": "flaws_cloudtrail:0000177:692378f-ee24-4c4c-b98e-9577b14cf8ce", "row_index": 177, "timestamp": "2019-05-27T21:21:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "692378f-ee24-4c4c-b98e-9577b14cf8ce", "eventTime": "2019-05-27T21:21:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMWjZ2L0ZUK0xnYlZFUEdsUGlqUWJ4bk5JRDNQNDZtbm9aT0xuOTNoU25sbmEwYlh3dFBxMUMyeURMOTFDOUdvZUZINWJ2cU5RcnljOTMzclRvZElvTWYyQ1dHT1hDRVR0VWFlNlJsWVJRODJNVGlzd3lHS0JkZ0hvYkE0QlMrSmdScjJZSVNjQzJoYzFQTzNuUk42SXVYdXRQVVNNNVpJS2F0aVhqWU5yUFhTSS9pWU9ZSXA3ZDQvQkV5UDhjWEZuK1A4K1NFbkpUST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df30b1f4-8ca3-4084-a7db-224fce309284", "record_id": "flaws_cloudtrail:0000178:df30b1f4-8ca3-4084-a7db-224fce309284", "row_index": 178, "timestamp": "2019-05-27T21:21:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df30b1f4-8ca3-4084-a7db-224fce309284", "eventTime": "2019-05-27T21:21:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5RlE4V2Jya2l3bnBPYUw2TGFtd3JKZ3NWSUppVitkUjVkZ0t3cVF1N09IRWo3aXcwZUJaa0hDWEg5M2l3dG8zM29ibExWWC9PbHM4b2QveGNaa0UwbUFzY1RVaWV0OEJ5SW9jUC9NZWRUalZYQW9qdTk0eFprVXYvK3pOOGtGd1oreHM4N0d0eW9tNm1OS2V3blhIVlA5YVhYVUIzZlQ5a0lpL0I1dUhJVW1BRHNITmdVb2F4cnVMYkp5cGdtWjEvZFFhcWY1RzE5OXlXUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "692378f-ee24-4c4c-b98e-9577b14cf8ce", "record_id": "flaws_cloudtrail:0000179:692378f-ee24-4c4c-b98e-9577b14cf8ce", "row_index": 179, "timestamp": "2019-05-27T21:21:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "692378f-ee24-4c4c-b98e-9577b14cf8ce", "eventTime": "2019-05-27T21:21:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMWjZ2L0ZUK0xnYlZFUEdsUGlqUWJ4bk5JRDNQNDZtbm9aT0xuOTNoU25sbmEwYlh3dFBxMUMyeURMOTFDOUdvZUZINWJ2cU5RcnljOTMzclRvZElvTWYyQ1dHT1hDRVR0VWFlNlJsWVJRODJNVGlzd3lHS0JkZ0hvYkE0QlMrSmdScjJZSVNjQzJoYzFQTzNuUk42SXVYdXRQVVNNNVpJS2F0aVhqWU5yUFhTSS9pWU9ZSXA3ZDQvQkV5UDhjWEZuK1A4K1NFbkpUST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df30b1f4-8ca3-4084-a7db-224fce309284", "record_id": "flaws_cloudtrail:0000180:df30b1f4-8ca3-4084-a7db-224fce309284", "row_index": 180, "timestamp": "2019-05-27T21:21:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df30b1f4-8ca3-4084-a7db-224fce309284", "eventTime": "2019-05-27T21:21:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5RlE4V2Jya2l3bnBPYUw2TGFtd3JKZ3NWSUppVitkUjVkZ0t3cVF1N09IRWo3aXcwZUJaa0hDWEg5M2l3dG8zM29ibExWWC9PbHM4b2QveGNaa0UwbUFzY1RVaWV0OEJ5SW9jUC9NZWRUalZYQW9qdTk0eFprVXYvK3pOOGtGd1oreHM4N0d0eW9tNm1OS2V3blhIVlA5YVhYVUIzZlQ5a0lpL0I1dUhJVW1BRHNITmdVb2F4cnVMYkp5cGdtWjEvZFFhcWY1RzE5OXlXUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ef2453b-b609-4293-937d-b21b74e211b3", "record_id": "flaws_cloudtrail:0000181:2ef2453b-b609-4293-937d-b21b74e211b3", "row_index": 181, "timestamp": "2019-05-27T21:21:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ef2453b-b609-4293-937d-b21b74e211b3", "eventTime": "2019-05-27T21:21:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDU2pyYUUvUkZNajl3ZkZOMEJuUnp6Rm8xc0xvMHR5bTRHWGY5b2U0dnRLWkwyUXE3NHVSS3QxUFBXOXNiV04yVVNxa29VaitpSzhrZ25LcWdkdUZ2cExSZVpPd0cwSGFxMHBud3RSVGZXU3BQanRVcEZLS2xVZTVydUF2QTg2NWFZUk93MlR2N3ByWFNmcHVwOVQ1ODZmUFdDeVlQWms3MHpnc2xLWXlZd3lkb1B4VVc2d01Db3N6MEJMZXhGTndPbDFyNTVEaE5YZUxyanJqNUE4RWc2VEhLYTZQLzhFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e62c11a-90ad-45a6-abe4-c3ca883abdef", "record_id": "flaws_cloudtrail:0000182:6e62c11a-90ad-45a6-abe4-c3ca883abdef", "row_index": 182, "timestamp": "2019-05-27T21:21:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e62c11a-90ad-45a6-abe4-c3ca883abdef", "eventTime": "2019-05-27T21:21:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3RVd5QlVpMFV0TCtLWnBNblVUZFd6ME1ZeTV3akdZYW9Sa1oyeThGZWJHaTU3bTlXeVBMd1kvdFZPUFI0ZVJRODhYQUxvOEkvazFXaW82bUFqV2JQMkYxMzNscERxME5pL1lRZ1JicTJtMHd4c0s5Zm9ScTVKTE9Pb2xLSXZjMWQ5NjFNcUJxZkR6RkdBSk9WRnpWWU1SdnM3MGkxUzdsWTBWM2pzWEF6bVR4enN6YU9jVTZXcnFNYUxrYndMb3RLZHA3YTJSVTBPaDZKb3JISlJEc1NIUUFJNFFHbFZvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a05df59-bb46-4e35-9053-b67a6be7c758", "record_id": "flaws_cloudtrail:0000183:4a05df59-bb46-4e35-9053-b67a6be7c758", "row_index": 183, "timestamp": "2019-05-27T21:21:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a05df59-bb46-4e35-9053-b67a6be7c758", "eventTime": "2019-05-27T21:21:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhVERtSG9GVmFvYnROcnlyY3R5RmNmWTFTZnM5ZGU4SnhzanE2VWRaOUs1NlNVS1RYeXVDTnhGMitkVEpndmxxWXp4d1JDclBWMVNDVVJJYjNGL1c2VkhsT1l1d1Q4RlJuTVNtVFBkdzFtcGtwdHJ2VzV5eEphaHphYXRMU1FLWnJQdWJiUVJFRHY3UVdQQzFxNW1lMDBMei9uNVg0NDBKODlkTU5rUXV6VkpBU0ZEZUZWMGwyYWFtemI3SHV5TzJBMFBmbWFDbldhYWsvWXIzdFpMWjFuZml5ZFR4Y3RnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ef2453b-b609-4293-937d-b21b74e211b3", "record_id": "flaws_cloudtrail:0000184:2ef2453b-b609-4293-937d-b21b74e211b3", "row_index": 184, "timestamp": "2019-05-27T21:21:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ef2453b-b609-4293-937d-b21b74e211b3", "eventTime": "2019-05-27T21:21:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDU2pyYUUvUkZNajl3ZkZOMEJuUnp6Rm8xc0xvMHR5bTRHWGY5b2U0dnRLWkwyUXE3NHVSS3QxUFBXOXNiV04yVVNxa29VaitpSzhrZ25LcWdkdUZ2cExSZVpPd0cwSGFxMHBud3RSVGZXU3BQanRVcEZLS2xVZTVydUF2QTg2NWFZUk93MlR2N3ByWFNmcHVwOVQ1ODZmUFdDeVlQWms3MHpnc2xLWXlZd3lkb1B4VVc2d01Db3N6MEJMZXhGTndPbDFyNTVEaE5YZUxyanJqNUE4RWc2VEhLYTZQLzhFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e62c11a-90ad-45a6-abe4-c3ca883abdef", "record_id": "flaws_cloudtrail:0000185:6e62c11a-90ad-45a6-abe4-c3ca883abdef", "row_index": 185, "timestamp": "2019-05-27T21:21:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e62c11a-90ad-45a6-abe4-c3ca883abdef", "eventTime": "2019-05-27T21:21:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3RVd5QlVpMFV0TCtLWnBNblVUZFd6ME1ZeTV3akdZYW9Sa1oyeThGZWJHaTU3bTlXeVBMd1kvdFZPUFI0ZVJRODhYQUxvOEkvazFXaW82bUFqV2JQMkYxMzNscERxME5pL1lRZ1JicTJtMHd4c0s5Zm9ScTVKTE9Pb2xLSXZjMWQ5NjFNcUJxZkR6RkdBSk9WRnpWWU1SdnM3MGkxUzdsWTBWM2pzWEF6bVR4enN6YU9jVTZXcnFNYUxrYndMb3RLZHA3YTJSVTBPaDZKb3JISlJEc1NIUUFJNFFHbFZvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a05df59-bb46-4e35-9053-b67a6be7c758", "record_id": "flaws_cloudtrail:0000186:4a05df59-bb46-4e35-9053-b67a6be7c758", "row_index": 186, "timestamp": "2019-05-27T21:21:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a05df59-bb46-4e35-9053-b67a6be7c758", "eventTime": "2019-05-27T21:21:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhVERtSG9GVmFvYnROcnlyY3R5RmNmWTFTZnM5ZGU4SnhzanE2VWRaOUs1NlNVS1RYeXVDTnhGMitkVEpndmxxWXp4d1JDclBWMVNDVVJJYjNGL1c2VkhsT1l1d1Q4RlJuTVNtVFBkdzFtcGtwdHJ2VzV5eEphaHphYXRMU1FLWnJQdWJiUVJFRHY3UVdQQzFxNW1lMDBMei9uNVg0NDBKODlkTU5rUXV6VkpBU0ZEZUZWMGwyYWFtemI3SHV5TzJBMFBmbWFDbldhYWsvWXIzdFpMWjFuZml5ZFR4Y3RnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5c0a591-cc3f-413a-8273-10cbedf7f455", "record_id": "flaws_cloudtrail:0000187:a5c0a591-cc3f-413a-8273-10cbedf7f455", "row_index": 187, "timestamp": "2019-05-27T21:21:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5c0a591-cc3f-413a-8273-10cbedf7f455", "eventTime": "2019-05-27T21:21:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQRUNremh4N2UyQkk0L1IrWWxLYjFuRDBUV1lteU1zb000SEVXK2xab2NySE12MzIxb0d0NGRKaElleTRiMkVMMkdhS2dhV25nV1NnOEV4Z3FkU2trc0dZVEFsNkVoVy8wY05UUzdtUWtUb2JOcTFaTFF4YVE0ekJqaUZMaTZWZjV3blVIMUFUWDhsbHdONDNTMW5ydmhEb01ySFFuMGgzYmgwTkNUWGpTbGUrZGNwMWlmSEJ6dE1qZnNYRUhCOTBLUWhMQis5QUF0THBkbHhLWjFSekdjTFgrZFA4RmIwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bc232a8-8c0b-4dc8-8f24-58bd079a5069", "record_id": "flaws_cloudtrail:0000188:2bc232a8-8c0b-4dc8-8f24-58bd079a5069", "row_index": 188, "timestamp": "2019-05-27T21:21:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bc232a8-8c0b-4dc8-8f24-58bd079a5069", "eventTime": "2019-05-27T21:21:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6QWxiZHRyQ05LNzR2YVdIbUpreFpGZG9MdUMwc0Z4Mk5nNXVESXhBeHhFaXRJUEhsRXByMU5ZMU5hNVlrOWZZWlZYNnc1OFBrZUhLRHlrQ3puYmVVV01zK2xKOE5HVHEzOEd5dzJaTmRPSGRVWDlSN3B0N3FvNjdzOFJRQXVhTHRFOWh0MXhyOTY4OXhRZWpZREt1VGVSa0hCWi9kUFZIYWxIaERiQWdRNFgzNGpCWW02WFJlcjM4RWE5OWxhT1E4WHJUeHBjb3p5enV1M25GQkxoZW9RZkVqZkJRRkJFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2377c08-bef2-46b5-a223-1bc95f10763", "record_id": "flaws_cloudtrail:0000189:d2377c08-bef2-46b5-a223-1bc95f10763", "row_index": 189, "timestamp": "2019-05-27T21:21:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2377c08-bef2-46b5-a223-1bc95f10763", "eventTime": "2019-05-27T21:21:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzZXFuWm9NbEJST0pXTnpqNVZFRE1EbTBJREdlWjVuQXRSNDFoZ0laMXFwUitMZVo1Z0IwNE5sZFdqYXRUUFl6R08yRjZZdW5obTVtVFBEM0tEZ0o4c25XTkhSZFFtUDdSNG40WVRLbkpiVWNsNFRVMlFTWnpkbEtaSFlCa2pGYmZNVUxLdUVlVnl5OUpkZEMweVJ2b0pUdTRiZ2dJa3ZDSjhyaGZOVG1vdFFYbVlpcWJheVRvTkFKQnQ4d01jTk9UVVZaNEJCRTVuTnhxMzNaWS9jZmlMOXVXSXNXbVo0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5c0a591-cc3f-413a-8273-10cbedf7f455", "record_id": "flaws_cloudtrail:0000190:a5c0a591-cc3f-413a-8273-10cbedf7f455", "row_index": 190, "timestamp": "2019-05-27T21:21:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5c0a591-cc3f-413a-8273-10cbedf7f455", "eventTime": "2019-05-27T21:21:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQRUNremh4N2UyQkk0L1IrWWxLYjFuRDBUV1lteU1zb000SEVXK2xab2NySE12MzIxb0d0NGRKaElleTRiMkVMMkdhS2dhV25nV1NnOEV4Z3FkU2trc0dZVEFsNkVoVy8wY05UUzdtUWtUb2JOcTFaTFF4YVE0ekJqaUZMaTZWZjV3blVIMUFUWDhsbHdONDNTMW5ydmhEb01ySFFuMGgzYmgwTkNUWGpTbGUrZGNwMWlmSEJ6dE1qZnNYRUhCOTBLUWhMQis5QUF0THBkbHhLWjFSekdjTFgrZFA4RmIwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bc232a8-8c0b-4dc8-8f24-58bd079a5069", "record_id": "flaws_cloudtrail:0000191:2bc232a8-8c0b-4dc8-8f24-58bd079a5069", "row_index": 191, "timestamp": "2019-05-27T21:21:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bc232a8-8c0b-4dc8-8f24-58bd079a5069", "eventTime": "2019-05-27T21:21:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6QWxiZHRyQ05LNzR2YVdIbUpreFpGZG9MdUMwc0Z4Mk5nNXVESXhBeHhFaXRJUEhsRXByMU5ZMU5hNVlrOWZZWlZYNnc1OFBrZUhLRHlrQ3puYmVVV01zK2xKOE5HVHEzOEd5dzJaTmRPSGRVWDlSN3B0N3FvNjdzOFJRQXVhTHRFOWh0MXhyOTY4OXhRZWpZREt1VGVSa0hCWi9kUFZIYWxIaERiQWdRNFgzNGpCWW02WFJlcjM4RWE5OWxhT1E4WHJUeHBjb3p5enV1M25GQkxoZW9RZkVqZkJRRkJFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2377c08-bef2-46b5-a223-1bc95f10763", "record_id": "flaws_cloudtrail:0000192:d2377c08-bef2-46b5-a223-1bc95f10763", "row_index": 192, "timestamp": "2019-05-27T21:21:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2377c08-bef2-46b5-a223-1bc95f10763", "eventTime": "2019-05-27T21:21:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzZXFuWm9NbEJST0pXTnpqNVZFRE1EbTBJREdlWjVuQXRSNDFoZ0laMXFwUitMZVo1Z0IwNE5sZFdqYXRUUFl6R08yRjZZdW5obTVtVFBEM0tEZ0o4c25XTkhSZFFtUDdSNG40WVRLbkpiVWNsNFRVMlFTWnpkbEtaSFlCa2pGYmZNVUxLdUVlVnl5OUpkZEMweVJ2b0pUdTRiZ2dJa3ZDSjhyaGZOVG1vdFFYbVlpcWJheVRvTkFKQnQ4d01jTk9UVVZaNEJCRTVuTnhxMzNaWS9jZmlMOXVXSXNXbVo0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7be806cc-00ec-4d01-a65d-9c39da5e98a9", "record_id": "flaws_cloudtrail:0000193:7be806cc-00ec-4d01-a65d-9c39da5e98a9", "row_index": 193, "timestamp": "2019-05-27T21:21:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7be806cc-00ec-4d01-a65d-9c39da5e98a9", "eventTime": "2019-05-27T21:21:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvTUtCQjNTNTVmQ3BtYlErN0xteThLNDJDV2dVektna1NENlpJc2ZBTWN6U3VQZndDQzJwYXo4ajBEZXRkbTJZYmhRY1V5RUR3d0tDOEVnVTFEaWtBamVseWZhUDQ3SytvRXRoQVB6eTFTeStERUtKMkdrdGc4bkgwVGdyWUgva0swbDhkWk1PWUVucVdjdThqOVlYYzl6bEVNM2FKc3R1NVRoZ1FRZ2FhZnV0dWZOYS9ROTlRblVRTTIxdUhGVTJaWWUyL0ZNbC9xTXhpQmFXWTNZS2I5M0txUXR1OFl3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7be806cc-00ec-4d01-a65d-9c39da5e98a9", "record_id": "flaws_cloudtrail:0000194:7be806cc-00ec-4d01-a65d-9c39da5e98a9", "row_index": 194, "timestamp": "2019-05-27T21:21:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7be806cc-00ec-4d01-a65d-9c39da5e98a9", "eventTime": "2019-05-27T21:21:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvTUtCQjNTNTVmQ3BtYlErN0xteThLNDJDV2dVektna1NENlpJc2ZBTWN6U3VQZndDQzJwYXo4ajBEZXRkbTJZYmhRY1V5RUR3d0tDOEVnVTFEaWtBamVseWZhUDQ3SytvRXRoQVB6eTFTeStERUtKMkdrdGc4bkgwVGdyWUgva0swbDhkWk1PWUVucVdjdThqOVlYYzl6bEVNM2FKc3R1NVRoZ1FRZ2FhZnV0dWZOYS9ROTlRblVRTTIxdUhGVTJaWWUyL0ZNbC9xTXhpQmFXWTNZS2I5M0txUXR1OFl3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5239d41b-61d9-4921-a0c7-680001d227e5a", "record_id": "flaws_cloudtrail:0000195:5239d41b-61d9-4921-a0c7-680001d227e5a", "row_index": 195, "timestamp": "2019-05-27T21:22:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5239d41b-61d9-4921-a0c7-680001d227e5a", "eventTime": "2019-05-27T21:22:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5239d41b-61d9-4921-a0c7-680001d227e5a", "record_id": "flaws_cloudtrail:0000196:5239d41b-61d9-4921-a0c7-680001d227e5a", "row_index": 196, "timestamp": "2019-05-27T21:22:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5239d41b-61d9-4921-a0c7-680001d227e5a", "eventTime": "2019-05-27T21:22:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d27a1efb-8966-47b7-83d3-5d6cde675a30", "record_id": "flaws_cloudtrail:0000197:d27a1efb-8966-47b7-83d3-5d6cde675a30", "row_index": 197, "timestamp": "2019-05-27T21:23:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d27a1efb-8966-47b7-83d3-5d6cde675a30", "eventTime": "2019-05-27T21:23:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d27a1efb-8966-47b7-83d3-5d6cde675a30", "record_id": "flaws_cloudtrail:0000198:d27a1efb-8966-47b7-83d3-5d6cde675a30", "row_index": 198, "timestamp": "2019-05-27T21:23:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d27a1efb-8966-47b7-83d3-5d6cde675a30", "eventTime": "2019-05-27T21:23:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9900a39-45ea-4202-8628-14c7dbfa6063", "record_id": "flaws_cloudtrail:0000199:c9900a39-45ea-4202-8628-14c7dbfa6063", "row_index": 199, "timestamp": "2019-05-27T21:24:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9900a39-45ea-4202-8628-14c7dbfa6063", "eventTime": "2019-05-27T21:24:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9900a39-45ea-4202-8628-14c7dbfa6063", "record_id": "flaws_cloudtrail:0000200:c9900a39-45ea-4202-8628-14c7dbfa6063", "row_index": 200, "timestamp": "2019-05-27T21:24:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9900a39-45ea-4202-8628-14c7dbfa6063", "eventTime": "2019-05-27T21:24:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "382a724c-edec-4d6f-ab4c-355417ac927f", "record_id": "flaws_cloudtrail:0000201:382a724c-edec-4d6f-ab4c-355417ac927f", "row_index": 201, "timestamp": "2019-05-27T22:02:02Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "382a724c-edec-4d6f-ab4c-355417ac927f", "eventTime": "2019-05-27T22:02:02Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAA59Z5IJ0H0TSSN3M", "expiration": "May 28, 2019 4:19:09 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "382a724c-edec-4d6f-ab4c-355417ac927f", "record_id": "flaws_cloudtrail:0000202:382a724c-edec-4d6f-ab4c-355417ac927f", "row_index": 202, "timestamp": "2019-05-27T22:02:02Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "382a724c-edec-4d6f-ab4c-355417ac927f", "eventTime": "2019-05-27T22:02:02Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAA59Z5IJ0H0TSSN3M", "expiration": "May 28, 2019 4:19:09 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27b0dc0c-f37c-406d-ad4f-6d9511736ff6", "record_id": "flaws_cloudtrail:0000203:27b0dc0c-f37c-406d-ad4f-6d9511736ff6", "row_index": 203, "timestamp": "2019-05-27T22:46:31Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAF0XE3PHM45W8UNFA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "210.72.226.159", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 545, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27b0dc0c-f37c-406d-ad4f-6d9511736ff6", "eventTime": "2019-05-27T22:46:31Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "210.72.226.159", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAF0XE3PHM45W8UNFA", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b7234b8-85d8-4223-9575-661ffa217a13", "record_id": "flaws_cloudtrail:0000204:7b7234b8-85d8-4223-9575-661ffa217a13", "row_index": 204, "timestamp": "2019-05-27T22:47:37Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAF0XE3PHM45W8UNFA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "210.72.226.159", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 549, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b7234b8-85d8-4223-9575-661ffa217a13", "eventTime": "2019-05-27T22:47:37Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "210.72.226.159", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAF0XE3PHM45W8UNFA", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34d227a5-e0ca-469c-b01b-6ec65cb40b1e", "record_id": "flaws_cloudtrail:0000205:34d227a5-e0ca-469c-b01b-6ec65cb40b1e", "row_index": 205, "timestamp": "2019-05-27T22:48:50Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAF0XE3PHM45W8UNFA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "210.72.226.159", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-8799"], "raw_record_size_bytes": 674, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34d227a5-e0ca-469c-b01b-6ec65cb40b1e", "eventTime": "2019-05-27T22:48:50Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "210.72.226.159", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAF0XE3PHM45W8UNFA", "userName": "backup"}, "requestParameters": {"name": "trail-8799"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-8799"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fb6299f-37d2-4154-bf17-e37b1c7d5bed", "record_id": "flaws_cloudtrail:0000206:6fb6299f-37d2-4154-bf17-e37b1c7d5bed", "row_index": 206, "timestamp": "2019-05-27T22:49:33Z", "event_type": "StopLogging", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAF0XE3PHM45W8UNFA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "210.72.226.159", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-8799"], "raw_record_size_bytes": 671, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fb6299f-37d2-4154-bf17-e37b1c7d5bed", "eventTime": "2019-05-27T22:49:33Z", "eventName": "StopLogging", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "210.72.226.159", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAF0XE3PHM45W8UNFA", "userName": "backup"}, "requestParameters": {"name": "trail-8799"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-8799"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d748bfdb-4d9b-4fd0-a8bf-974fcdf03055", "record_id": "flaws_cloudtrail:0000207:d748bfdb-4d9b-4fd0-a8bf-974fcdf03055", "row_index": 207, "timestamp": "2019-05-27T22:50:08Z", "event_type": "UpdateTrail", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAF0XE3PHM45W8UNFA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "210.72.226.159", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-8799"], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d748bfdb-4d9b-4fd0-a8bf-974fcdf03055", "eventTime": "2019-05-27T22:50:08Z", "eventName": "UpdateTrail", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "210.72.226.159", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAF0XE3PHM45W8UNFA", "userName": "backup"}, "requestParameters": {"name": "trail-8799", "isMultiRegionTrail": false, "enableLogFileValidation": false}, "resources": [{"ARN": "arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-8799"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffac2d12-1e54-4251-93e3-f89e1d0deafb", "record_id": "flaws_cloudtrail:0000208:ffac2d12-1e54-4251-93e3-f89e1d0deafb", "row_index": 208, "timestamp": "2019-05-27T23:02:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffac2d12-1e54-4251-93e3-f89e1d0deafb", "eventTime": "2019-05-27T23:02:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA56Y9M0VHPKFO6KLW", "expiration": "May 28, 2019 5:32:07 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffac2d12-1e54-4251-93e3-f89e1d0deafb", "record_id": "flaws_cloudtrail:0000209:ffac2d12-1e54-4251-93e3-f89e1d0deafb", "row_index": 209, "timestamp": "2019-05-27T23:02:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffac2d12-1e54-4251-93e3-f89e1d0deafb", "eventTime": "2019-05-27T23:02:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA56Y9M0VHPKFO6KLW", "expiration": "May 28, 2019 5:32:07 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cb04741-566a-4b53-934b-9bec0c5f2363", "record_id": "flaws_cloudtrail:0000210:8cb04741-566a-4b53-934b-9bec0c5f2363", "row_index": 210, "timestamp": "2019-05-27T23:34:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA56Y9M0VHPKFO6KLW", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "5.13.153.253", "user_agent": "[aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1160, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cb04741-566a-4b53-934b-9bec0c5f2363", "eventTime": "2019-05-27T23:34:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA56Y9M0VHPKFO6KLW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-27T23:02:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cb04741-566a-4b53-934b-9bec0c5f2363", "record_id": "flaws_cloudtrail:0000211:8cb04741-566a-4b53-934b-9bec0c5f2363", "row_index": 211, "timestamp": "2019-05-27T23:34:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA56Y9M0VHPKFO6KLW", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "5.13.153.253", "user_agent": "[aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1160, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cb04741-566a-4b53-934b-9bec0c5f2363", "eventTime": "2019-05-27T23:34:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA56Y9M0VHPKFO6KLW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-27T23:02:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61080c56-ac41-4f4c-934b-31cf2a18b429", "record_id": "flaws_cloudtrail:0000212:61080c56-ac41-4f4c-934b-31cf2a18b429", "row_index": 212, "timestamp": "2019-05-27T23:37:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61080c56-ac41-4f4c-934b-31cf2a18b429", "eventTime": "2019-05-27T23:37:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61080c56-ac41-4f4c-934b-31cf2a18b429", "record_id": "flaws_cloudtrail:0000213:61080c56-ac41-4f4c-934b-31cf2a18b429", "row_index": 213, "timestamp": "2019-05-27T23:37:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61080c56-ac41-4f4c-934b-31cf2a18b429", "eventTime": "2019-05-27T23:37:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3472ea2-0694-4ba2-9211-602576e868350", "record_id": "flaws_cloudtrail:0000214:e3472ea2-0694-4ba2-9211-602576e868350", "row_index": 214, "timestamp": "2019-05-27T23:38:42Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3472ea2-0694-4ba2-9211-602576e868350", "eventTime": "2019-05-27T23:38:42Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3472ea2-0694-4ba2-9211-602576e868350", "record_id": "flaws_cloudtrail:0000215:e3472ea2-0694-4ba2-9211-602576e868350", "row_index": 215, "timestamp": "2019-05-27T23:38:42Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3472ea2-0694-4ba2-9211-602576e868350", "eventTime": "2019-05-27T23:38:42Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f95460d-087e-4cbe-8873-376f0cbe3236", "record_id": "flaws_cloudtrail:0000216:3f95460d-087e-4cbe-8873-376f0cbe3236", "row_index": 216, "timestamp": "2019-05-27T23:38:43Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f95460d-087e-4cbe-8873-376f0cbe3236", "eventTime": "2019-05-27T23:38:43Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "607102ee1-f99b-4c81-be4e-3c4410eecfff", "record_id": "flaws_cloudtrail:0000217:607102ee1-f99b-4c81-be4e-3c4410eecfff", "row_index": 217, "timestamp": "2019-05-27T23:38:43Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "607102ee1-f99b-4c81-be4e-3c4410eecfff", "eventTime": "2019-05-27T23:38:43Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d12c4806-36e2-4697-91b6-99c6ed7ba028", "record_id": "flaws_cloudtrail:0000218:d12c4806-36e2-4697-91b6-99c6ed7ba028", "row_index": 218, "timestamp": "2019-05-27T23:38:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d12c4806-36e2-4697-91b6-99c6ed7ba028", "eventTime": "2019-05-27T23:38:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "650bb9da-2e11-4c57-9a8e-dd3f074d9664", "record_id": "flaws_cloudtrail:0000219:650bb9da-2e11-4c57-9a8e-dd3f074d9664", "row_index": 219, "timestamp": "2019-05-27T23:38:43Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "650bb9da-2e11-4c57-9a8e-dd3f074d9664", "eventTime": "2019-05-27T23:38:43Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "153ad97e-e6a8-4f26-976f-92dc5633877f", "record_id": "flaws_cloudtrail:0000220:153ad97e-e6a8-4f26-976f-92dc5633877f", "row_index": 220, "timestamp": "2019-05-27T23:38:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "153ad97e-e6a8-4f26-976f-92dc5633877f", "eventTime": "2019-05-27T23:38:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e480df53-9c4b-4722-8b29-5529e3b3279a", "record_id": "flaws_cloudtrail:0000221:e480df53-9c4b-4722-8b29-5529e3b3279a", "row_index": 221, "timestamp": "2019-05-27T23:38:43Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e480df53-9c4b-4722-8b29-5529e3b3279a", "eventTime": "2019-05-27T23:38:43Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a2ad0f2-36b5-4211-96d4-d70b982b9f4e", "record_id": "flaws_cloudtrail:0000222:9a2ad0f2-36b5-4211-96d4-d70b982b9f4e", "row_index": 222, "timestamp": "2019-05-27T23:38:43Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a2ad0f2-36b5-4211-96d4-d70b982b9f4e", "eventTime": "2019-05-27T23:38:43Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9aafb88-1785-4308-a9f2-a1b68badd20a", "record_id": "flaws_cloudtrail:0000223:d9aafb88-1785-4308-a9f2-a1b68badd20a", "row_index": 223, "timestamp": "2019-05-27T23:38:43Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9aafb88-1785-4308-a9f2-a1b68badd20a", "eventTime": "2019-05-27T23:38:43Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f95460d-087e-4cbe-8873-376f0cbe3236", "record_id": "flaws_cloudtrail:0000224:3f95460d-087e-4cbe-8873-376f0cbe3236", "row_index": 224, "timestamp": "2019-05-27T23:38:43Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f95460d-087e-4cbe-8873-376f0cbe3236", "eventTime": "2019-05-27T23:38:43Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "607102ee1-f99b-4c81-be4e-3c4410eecfff", "record_id": "flaws_cloudtrail:0000225:607102ee1-f99b-4c81-be4e-3c4410eecfff", "row_index": 225, "timestamp": "2019-05-27T23:38:43Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "607102ee1-f99b-4c81-be4e-3c4410eecfff", "eventTime": "2019-05-27T23:38:43Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d12c4806-36e2-4697-91b6-99c6ed7ba028", "record_id": "flaws_cloudtrail:0000226:d12c4806-36e2-4697-91b6-99c6ed7ba028", "row_index": 226, "timestamp": "2019-05-27T23:38:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d12c4806-36e2-4697-91b6-99c6ed7ba028", "eventTime": "2019-05-27T23:38:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "650bb9da-2e11-4c57-9a8e-dd3f074d9664", "record_id": "flaws_cloudtrail:0000227:650bb9da-2e11-4c57-9a8e-dd3f074d9664", "row_index": 227, "timestamp": "2019-05-27T23:38:43Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "650bb9da-2e11-4c57-9a8e-dd3f074d9664", "eventTime": "2019-05-27T23:38:43Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "153ad97e-e6a8-4f26-976f-92dc5633877f", "record_id": "flaws_cloudtrail:0000228:153ad97e-e6a8-4f26-976f-92dc5633877f", "row_index": 228, "timestamp": "2019-05-27T23:38:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "153ad97e-e6a8-4f26-976f-92dc5633877f", "eventTime": "2019-05-27T23:38:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e480df53-9c4b-4722-8b29-5529e3b3279a", "record_id": "flaws_cloudtrail:0000229:e480df53-9c4b-4722-8b29-5529e3b3279a", "row_index": 229, "timestamp": "2019-05-27T23:38:43Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e480df53-9c4b-4722-8b29-5529e3b3279a", "eventTime": "2019-05-27T23:38:43Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a2ad0f2-36b5-4211-96d4-d70b982b9f4e", "record_id": "flaws_cloudtrail:0000230:9a2ad0f2-36b5-4211-96d4-d70b982b9f4e", "row_index": 230, "timestamp": "2019-05-27T23:38:43Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a2ad0f2-36b5-4211-96d4-d70b982b9f4e", "eventTime": "2019-05-27T23:38:43Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9aafb88-1785-4308-a9f2-a1b68badd20a", "record_id": "flaws_cloudtrail:0000231:d9aafb88-1785-4308-a9f2-a1b68badd20a", "row_index": 231, "timestamp": "2019-05-27T23:38:43Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9aafb88-1785-4308-a9f2-a1b68badd20a", "eventTime": "2019-05-27T23:38:43Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21e29ab6-d53a-447a-b8fd-93914e87bd1d", "record_id": "flaws_cloudtrail:0000232:21e29ab6-d53a-447a-b8fd-93914e87bd1d", "row_index": 232, "timestamp": "2019-05-27T23:39:33Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21e29ab6-d53a-447a-b8fd-93914e87bd1d", "eventTime": "2019-05-27T23:39:33Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c40118-f9cf-4f54-a46d-9ce8d3f07a90", "record_id": "flaws_cloudtrail:0000233:c40118-f9cf-4f54-a46d-9ce8d3f07a90", "row_index": 233, "timestamp": "2019-05-27T23:39:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c40118-f9cf-4f54-a46d-9ce8d3f07a90", "eventTime": "2019-05-27T23:39:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21e29ab6-d53a-447a-b8fd-93914e87bd1d", "record_id": "flaws_cloudtrail:0000234:21e29ab6-d53a-447a-b8fd-93914e87bd1d", "row_index": 234, "timestamp": "2019-05-27T23:39:33Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21e29ab6-d53a-447a-b8fd-93914e87bd1d", "eventTime": "2019-05-27T23:39:33Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c40118-f9cf-4f54-a46d-9ce8d3f07a90", "record_id": "flaws_cloudtrail:0000235:c40118-f9cf-4f54-a46d-9ce8d3f07a90", "row_index": 235, "timestamp": "2019-05-27T23:39:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c40118-f9cf-4f54-a46d-9ce8d3f07a90", "eventTime": "2019-05-27T23:39:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60a915a2-eb89-42be-bcaf-551e88c493ac", "record_id": "flaws_cloudtrail:0000236:60a915a2-eb89-42be-bcaf-551e88c493ac", "row_index": 236, "timestamp": "2019-05-27T23:39:34Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60a915a2-eb89-42be-bcaf-551e88c493ac", "eventTime": "2019-05-27T23:39:34Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24ce1a69-c562-442d-aabf-29971e6506da", "record_id": "flaws_cloudtrail:0000237:24ce1a69-c562-442d-aabf-29971e6506da", "row_index": 237, "timestamp": "2019-05-27T23:39:34Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24ce1a69-c562-442d-aabf-29971e6506da", "eventTime": "2019-05-27T23:39:34Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "951312-47fc-4a70-bfff-b395eb874475", "record_id": "flaws_cloudtrail:0000238:951312-47fc-4a70-bfff-b395eb874475", "row_index": 238, "timestamp": "2019-05-27T23:39:34Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "951312-47fc-4a70-bfff-b395eb874475", "eventTime": "2019-05-27T23:39:34Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4acda7e4-951f-4f6c-afab-411f1416b07b", "record_id": "flaws_cloudtrail:0000239:4acda7e4-951f-4f6c-afab-411f1416b07b", "row_index": 239, "timestamp": "2019-05-27T23:39:34Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4acda7e4-951f-4f6c-afab-411f1416b07b", "eventTime": "2019-05-27T23:39:34Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60a915a2-eb89-42be-bcaf-551e88c493ac", "record_id": "flaws_cloudtrail:0000240:60a915a2-eb89-42be-bcaf-551e88c493ac", "row_index": 240, "timestamp": "2019-05-27T23:39:34Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60a915a2-eb89-42be-bcaf-551e88c493ac", "eventTime": "2019-05-27T23:39:34Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24ce1a69-c562-442d-aabf-29971e6506da", "record_id": "flaws_cloudtrail:0000241:24ce1a69-c562-442d-aabf-29971e6506da", "row_index": 241, "timestamp": "2019-05-27T23:39:34Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24ce1a69-c562-442d-aabf-29971e6506da", "eventTime": "2019-05-27T23:39:34Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "951312-47fc-4a70-bfff-b395eb874475", "record_id": "flaws_cloudtrail:0000242:951312-47fc-4a70-bfff-b395eb874475", "row_index": 242, "timestamp": "2019-05-27T23:39:34Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "951312-47fc-4a70-bfff-b395eb874475", "eventTime": "2019-05-27T23:39:34Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4acda7e4-951f-4f6c-afab-411f1416b07b", "record_id": "flaws_cloudtrail:0000243:4acda7e4-951f-4f6c-afab-411f1416b07b", "row_index": 243, "timestamp": "2019-05-27T23:39:34Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4acda7e4-951f-4f6c-afab-411f1416b07b", "eventTime": "2019-05-27T23:39:34Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "498b4734-f9bd-4fd4-a331-415d979554b7", "record_id": "flaws_cloudtrail:0000244:498b4734-f9bd-4fd4-a331-415d979554b7", "row_index": 244, "timestamp": "2019-05-27T23:39:35Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "498b4734-f9bd-4fd4-a331-415d979554b7", "eventTime": "2019-05-27T23:39:35Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e18b5eb-1d6e-4a05-80cf-1b1e3a2a191a", "record_id": "flaws_cloudtrail:0000245:7e18b5eb-1d6e-4a05-80cf-1b1e3a2a191a", "row_index": 245, "timestamp": "2019-05-27T23:39:35Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e18b5eb-1d6e-4a05-80cf-1b1e3a2a191a", "eventTime": "2019-05-27T23:39:35Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d77775f-9ba9-4de6-8971-b696e61350f9", "record_id": "flaws_cloudtrail:0000246:9d77775f-9ba9-4de6-8971-b696e61350f9", "row_index": 246, "timestamp": "2019-05-27T23:39:35Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d77775f-9ba9-4de6-8971-b696e61350f9", "eventTime": "2019-05-27T23:39:35Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "498b4734-f9bd-4fd4-a331-415d979554b7", "record_id": "flaws_cloudtrail:0000247:498b4734-f9bd-4fd4-a331-415d979554b7", "row_index": 247, "timestamp": "2019-05-27T23:39:35Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "498b4734-f9bd-4fd4-a331-415d979554b7", "eventTime": "2019-05-27T23:39:35Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e18b5eb-1d6e-4a05-80cf-1b1e3a2a191a", "record_id": "flaws_cloudtrail:0000248:7e18b5eb-1d6e-4a05-80cf-1b1e3a2a191a", "row_index": 248, "timestamp": "2019-05-27T23:39:35Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e18b5eb-1d6e-4a05-80cf-1b1e3a2a191a", "eventTime": "2019-05-27T23:39:35Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d77775f-9ba9-4de6-8971-b696e61350f9", "record_id": "flaws_cloudtrail:0000249:9d77775f-9ba9-4de6-8971-b696e61350f9", "row_index": 249, "timestamp": "2019-05-27T23:39:35Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d77775f-9ba9-4de6-8971-b696e61350f9", "eventTime": "2019-05-27T23:39:35Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cbe0861-33cd-4f97-b42c-cc7f5069c896", "record_id": "flaws_cloudtrail:0000250:0cbe0861-33cd-4f97-b42c-cc7f5069c896", "row_index": 250, "timestamp": "2019-05-27T23:39:36Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cbe0861-33cd-4f97-b42c-cc7f5069c896", "eventTime": "2019-05-27T23:39:36Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10ac7db7-142e-4203-8026-bda300e59c2f", "record_id": "flaws_cloudtrail:0000251:10ac7db7-142e-4203-8026-bda300e59c2f", "row_index": 251, "timestamp": "2019-05-27T23:39:36Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10ac7db7-142e-4203-8026-bda300e59c2f", "eventTime": "2019-05-27T23:39:36Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea8cd411-d1c5-4456-9d04-7998cfb2cc0a", "record_id": "flaws_cloudtrail:0000252:ea8cd411-d1c5-4456-9d04-7998cfb2cc0a", "row_index": 252, "timestamp": "2019-05-27T23:39:36Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea8cd411-d1c5-4456-9d04-7998cfb2cc0a", "eventTime": "2019-05-27T23:39:36Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d75d2e8-3e92-4e13-94f1-52e2315c8746", "record_id": "flaws_cloudtrail:0000253:2d75d2e8-3e92-4e13-94f1-52e2315c8746", "row_index": 253, "timestamp": "2019-05-27T23:39:36Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d75d2e8-3e92-4e13-94f1-52e2315c8746", "eventTime": "2019-05-27T23:39:36Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cbe0861-33cd-4f97-b42c-cc7f5069c896", "record_id": "flaws_cloudtrail:0000254:0cbe0861-33cd-4f97-b42c-cc7f5069c896", "row_index": 254, "timestamp": "2019-05-27T23:39:36Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cbe0861-33cd-4f97-b42c-cc7f5069c896", "eventTime": "2019-05-27T23:39:36Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10ac7db7-142e-4203-8026-bda300e59c2f", "record_id": "flaws_cloudtrail:0000255:10ac7db7-142e-4203-8026-bda300e59c2f", "row_index": 255, "timestamp": "2019-05-27T23:39:36Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10ac7db7-142e-4203-8026-bda300e59c2f", "eventTime": "2019-05-27T23:39:36Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea8cd411-d1c5-4456-9d04-7998cfb2cc0a", "record_id": "flaws_cloudtrail:0000256:ea8cd411-d1c5-4456-9d04-7998cfb2cc0a", "row_index": 256, "timestamp": "2019-05-27T23:39:36Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea8cd411-d1c5-4456-9d04-7998cfb2cc0a", "eventTime": "2019-05-27T23:39:36Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d75d2e8-3e92-4e13-94f1-52e2315c8746", "record_id": "flaws_cloudtrail:0000257:2d75d2e8-3e92-4e13-94f1-52e2315c8746", "row_index": 257, "timestamp": "2019-05-27T23:39:36Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d75d2e8-3e92-4e13-94f1-52e2315c8746", "eventTime": "2019-05-27T23:39:36Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cd2dc60-6eeb-44a4-9cd2-825319a728fb3", "record_id": "flaws_cloudtrail:0000258:6cd2dc60-6eeb-44a4-9cd2-825319a728fb3", "row_index": 258, "timestamp": "2019-05-27T23:39:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cd2dc60-6eeb-44a4-9cd2-825319a728fb3", "eventTime": "2019-05-27T23:39:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cd2dc60-6eeb-44a4-9cd2-825319a728fb3", "record_id": "flaws_cloudtrail:0000259:6cd2dc60-6eeb-44a4-9cd2-825319a728fb3", "row_index": 259, "timestamp": "2019-05-27T23:39:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cd2dc60-6eeb-44a4-9cd2-825319a728fb3", "eventTime": "2019-05-27T23:39:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4a4d8f4-5274-418a-8ed1-8eb9fa78960", "record_id": "flaws_cloudtrail:0000260:a4a4d8f4-5274-418a-8ed1-8eb9fa78960", "row_index": 260, "timestamp": "2019-05-27T23:39:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4a4d8f4-5274-418a-8ed1-8eb9fa78960", "eventTime": "2019-05-27T23:39:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41c75e75-665a-42c5-9d66-b36551fd69f", "record_id": "flaws_cloudtrail:0000261:41c75e75-665a-42c5-9d66-b36551fd69f", "row_index": 261, "timestamp": "2019-05-27T23:39:38Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41c75e75-665a-42c5-9d66-b36551fd69f", "eventTime": "2019-05-27T23:39:38Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a98aaeb3-1af3-4e0b-a206-564b6069f0b6", "record_id": "flaws_cloudtrail:0000262:a98aaeb3-1af3-4e0b-a206-564b6069f0b6", "row_index": 262, "timestamp": "2019-05-27T23:39:38Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a98aaeb3-1af3-4e0b-a206-564b6069f0b6", "eventTime": "2019-05-27T23:39:38Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4a4d8f4-5274-418a-8ed1-8eb9fa78960", "record_id": "flaws_cloudtrail:0000263:a4a4d8f4-5274-418a-8ed1-8eb9fa78960", "row_index": 263, "timestamp": "2019-05-27T23:39:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4a4d8f4-5274-418a-8ed1-8eb9fa78960", "eventTime": "2019-05-27T23:39:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41c75e75-665a-42c5-9d66-b36551fd69f", "record_id": "flaws_cloudtrail:0000264:41c75e75-665a-42c5-9d66-b36551fd69f", "row_index": 264, "timestamp": "2019-05-27T23:39:38Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41c75e75-665a-42c5-9d66-b36551fd69f", "eventTime": "2019-05-27T23:39:38Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a98aaeb3-1af3-4e0b-a206-564b6069f0b6", "record_id": "flaws_cloudtrail:0000265:a98aaeb3-1af3-4e0b-a206-564b6069f0b6", "row_index": 265, "timestamp": "2019-05-27T23:39:38Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a98aaeb3-1af3-4e0b-a206-564b6069f0b6", "eventTime": "2019-05-27T23:39:38Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "007c3d9c-a189-42de-a18a-c2fcdc947ecf", "record_id": "flaws_cloudtrail:0000266:007c3d9c-a189-42de-a18a-c2fcdc947ecf", "row_index": 266, "timestamp": "2019-05-27T23:39:39Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "007c3d9c-a189-42de-a18a-c2fcdc947ecf", "eventTime": "2019-05-27T23:39:39Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4db142d8-ae4b-4f11-adaf-67775e8849c0", "record_id": "flaws_cloudtrail:0000267:4db142d8-ae4b-4f11-adaf-67775e8849c0", "row_index": 267, "timestamp": "2019-05-27T23:39:39Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4db142d8-ae4b-4f11-adaf-67775e8849c0", "eventTime": "2019-05-27T23:39:39Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b9a00d6-4be0-485f-a3ef-8782cd48b726", "record_id": "flaws_cloudtrail:0000268:5b9a00d6-4be0-485f-a3ef-8782cd48b726", "row_index": 268, "timestamp": "2019-05-27T23:39:39Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b9a00d6-4be0-485f-a3ef-8782cd48b726", "eventTime": "2019-05-27T23:39:39Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "824e5d78-7cad-4ba4-8ee4-83bb025c3bc3", "record_id": "flaws_cloudtrail:0000269:824e5d78-7cad-4ba4-8ee4-83bb025c3bc3", "row_index": 269, "timestamp": "2019-05-27T23:39:39Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "824e5d78-7cad-4ba4-8ee4-83bb025c3bc3", "eventTime": "2019-05-27T23:39:39Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "007c3d9c-a189-42de-a18a-c2fcdc947ecf", "record_id": "flaws_cloudtrail:0000270:007c3d9c-a189-42de-a18a-c2fcdc947ecf", "row_index": 270, "timestamp": "2019-05-27T23:39:39Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "007c3d9c-a189-42de-a18a-c2fcdc947ecf", "eventTime": "2019-05-27T23:39:39Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4db142d8-ae4b-4f11-adaf-67775e8849c0", "record_id": "flaws_cloudtrail:0000271:4db142d8-ae4b-4f11-adaf-67775e8849c0", "row_index": 271, "timestamp": "2019-05-27T23:39:39Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4db142d8-ae4b-4f11-adaf-67775e8849c0", "eventTime": "2019-05-27T23:39:39Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b9a00d6-4be0-485f-a3ef-8782cd48b726", "record_id": "flaws_cloudtrail:0000272:5b9a00d6-4be0-485f-a3ef-8782cd48b726", "row_index": 272, "timestamp": "2019-05-27T23:39:39Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b9a00d6-4be0-485f-a3ef-8782cd48b726", "eventTime": "2019-05-27T23:39:39Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "824e5d78-7cad-4ba4-8ee4-83bb025c3bc3", "record_id": "flaws_cloudtrail:0000273:824e5d78-7cad-4ba4-8ee4-83bb025c3bc3", "row_index": 273, "timestamp": "2019-05-27T23:39:39Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "824e5d78-7cad-4ba4-8ee4-83bb025c3bc3", "eventTime": "2019-05-27T23:39:39Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "343805a06-4579-4b44-85e3-a272635c1", "record_id": "flaws_cloudtrail:0000274:343805a06-4579-4b44-85e3-a272635c1", "row_index": 274, "timestamp": "2019-05-27T23:39:40Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "343805a06-4579-4b44-85e3-a272635c1", "eventTime": "2019-05-27T23:39:40Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45da893a-11a7-4911-8aec-e7aede9725ff", "record_id": "flaws_cloudtrail:0000275:45da893a-11a7-4911-8aec-e7aede9725ff", "row_index": 275, "timestamp": "2019-05-27T23:39:40Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45da893a-11a7-4911-8aec-e7aede9725ff", "eventTime": "2019-05-27T23:39:40Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac4118cd-b15b-4f07-a52e-c102abe6967e", "record_id": "flaws_cloudtrail:0000276:ac4118cd-b15b-4f07-a52e-c102abe6967e", "row_index": 276, "timestamp": "2019-05-27T23:39:40Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac4118cd-b15b-4f07-a52e-c102abe6967e", "eventTime": "2019-05-27T23:39:40Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "343805a06-4579-4b44-85e3-a272635c1", "record_id": "flaws_cloudtrail:0000277:343805a06-4579-4b44-85e3-a272635c1", "row_index": 277, "timestamp": "2019-05-27T23:39:40Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "343805a06-4579-4b44-85e3-a272635c1", "eventTime": "2019-05-27T23:39:40Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45da893a-11a7-4911-8aec-e7aede9725ff", "record_id": "flaws_cloudtrail:0000278:45da893a-11a7-4911-8aec-e7aede9725ff", "row_index": 278, "timestamp": "2019-05-27T23:39:40Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45da893a-11a7-4911-8aec-e7aede9725ff", "eventTime": "2019-05-27T23:39:40Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac4118cd-b15b-4f07-a52e-c102abe6967e", "record_id": "flaws_cloudtrail:0000279:ac4118cd-b15b-4f07-a52e-c102abe6967e", "row_index": 279, "timestamp": "2019-05-27T23:39:40Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac4118cd-b15b-4f07-a52e-c102abe6967e", "eventTime": "2019-05-27T23:39:40Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e52b939-0c47-45d6-85f1-22a1d32449d1", "record_id": "flaws_cloudtrail:0000280:2e52b939-0c47-45d6-85f1-22a1d32449d1", "row_index": 280, "timestamp": "2019-05-27T23:39:41Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e52b939-0c47-45d6-85f1-22a1d32449d1", "eventTime": "2019-05-27T23:39:41Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49b6843d-d65a-4881-aa44-a74d8b9c330c", "record_id": "flaws_cloudtrail:0000281:49b6843d-d65a-4881-aa44-a74d8b9c330c", "row_index": 281, "timestamp": "2019-05-27T23:39:41Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49b6843d-d65a-4881-aa44-a74d8b9c330c", "eventTime": "2019-05-27T23:39:41Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e52b939-0c47-45d6-85f1-22a1d32449d1", "record_id": "flaws_cloudtrail:0000282:2e52b939-0c47-45d6-85f1-22a1d32449d1", "row_index": 282, "timestamp": "2019-05-27T23:39:41Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e52b939-0c47-45d6-85f1-22a1d32449d1", "eventTime": "2019-05-27T23:39:41Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49b6843d-d65a-4881-aa44-a74d8b9c330c", "record_id": "flaws_cloudtrail:0000283:49b6843d-d65a-4881-aa44-a74d8b9c330c", "row_index": 283, "timestamp": "2019-05-27T23:39:41Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49b6843d-d65a-4881-aa44-a74d8b9c330c", "eventTime": "2019-05-27T23:39:41Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9b9f0a3-88ef-4909-ab98-c60778d320278", "record_id": "flaws_cloudtrail:0000284:e9b9f0a3-88ef-4909-ab98-c60778d320278", "row_index": 284, "timestamp": "2019-05-27T23:39:42Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9b9f0a3-88ef-4909-ab98-c60778d320278", "eventTime": "2019-05-27T23:39:42Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97b458b1-20f5-4779-be0c-3c8dcd5636d0", "record_id": "flaws_cloudtrail:0000285:97b458b1-20f5-4779-be0c-3c8dcd5636d0", "row_index": 285, "timestamp": "2019-05-27T23:39:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97b458b1-20f5-4779-be0c-3c8dcd5636d0", "eventTime": "2019-05-27T23:39:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9b9f0a3-88ef-4909-ab98-c60778d320278", "record_id": "flaws_cloudtrail:0000286:e9b9f0a3-88ef-4909-ab98-c60778d320278", "row_index": 286, "timestamp": "2019-05-27T23:39:42Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9b9f0a3-88ef-4909-ab98-c60778d320278", "eventTime": "2019-05-27T23:39:42Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97b458b1-20f5-4779-be0c-3c8dcd5636d0", "record_id": "flaws_cloudtrail:0000287:97b458b1-20f5-4779-be0c-3c8dcd5636d0", "row_index": 287, "timestamp": "2019-05-27T23:39:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97b458b1-20f5-4779-be0c-3c8dcd5636d0", "eventTime": "2019-05-27T23:39:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca9da3ee-c184-4450-9abd-9355aa0e89d4", "record_id": "flaws_cloudtrail:0000288:ca9da3ee-c184-4450-9abd-9355aa0e89d4", "row_index": 288, "timestamp": "2019-05-27T23:39:43Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca9da3ee-c184-4450-9abd-9355aa0e89d4", "eventTime": "2019-05-27T23:39:43Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b265f761-de79-46dd-a743-5baf795a3b0e", "record_id": "flaws_cloudtrail:0000289:b265f761-de79-46dd-a743-5baf795a3b0e", "row_index": 289, "timestamp": "2019-05-27T23:39:43Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b265f761-de79-46dd-a743-5baf795a3b0e", "eventTime": "2019-05-27T23:39:43Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4de120ad-334d-4db6-b896-a830393ed813", "record_id": "flaws_cloudtrail:0000290:4de120ad-334d-4db6-b896-a830393ed813", "row_index": 290, "timestamp": "2019-05-27T23:39:43Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4de120ad-334d-4db6-b896-a830393ed813", "eventTime": "2019-05-27T23:39:43Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca9da3ee-c184-4450-9abd-9355aa0e89d4", "record_id": "flaws_cloudtrail:0000291:ca9da3ee-c184-4450-9abd-9355aa0e89d4", "row_index": 291, "timestamp": "2019-05-27T23:39:43Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca9da3ee-c184-4450-9abd-9355aa0e89d4", "eventTime": "2019-05-27T23:39:43Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b265f761-de79-46dd-a743-5baf795a3b0e", "record_id": "flaws_cloudtrail:0000292:b265f761-de79-46dd-a743-5baf795a3b0e", "row_index": 292, "timestamp": "2019-05-27T23:39:43Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b265f761-de79-46dd-a743-5baf795a3b0e", "eventTime": "2019-05-27T23:39:43Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4de120ad-334d-4db6-b896-a830393ed813", "record_id": "flaws_cloudtrail:0000293:4de120ad-334d-4db6-b896-a830393ed813", "row_index": 293, "timestamp": "2019-05-27T23:39:43Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4de120ad-334d-4db6-b896-a830393ed813", "eventTime": "2019-05-27T23:39:43Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c716099a-b9d9-4a62-b169-d07769", "record_id": "flaws_cloudtrail:0000294:c716099a-b9d9-4a62-b169-d07769", "row_index": 294, "timestamp": "2019-05-27T23:39:44Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c716099a-b9d9-4a62-b169-d07769", "eventTime": "2019-05-27T23:39:44Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75cf6671-e1d6-4859-a83b-f38daec85598", "record_id": "flaws_cloudtrail:0000295:75cf6671-e1d6-4859-a83b-f38daec85598", "row_index": 295, "timestamp": "2019-05-27T23:39:44Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75cf6671-e1d6-4859-a83b-f38daec85598", "eventTime": "2019-05-27T23:39:44Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e13d7e4e-1e9b-4a0d-819d-5efb5144f11a", "record_id": "flaws_cloudtrail:0000296:e13d7e4e-1e9b-4a0d-819d-5efb5144f11a", "row_index": 296, "timestamp": "2019-05-27T23:39:44Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e13d7e4e-1e9b-4a0d-819d-5efb5144f11a", "eventTime": "2019-05-27T23:39:44Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa44af6f-c718-48c2-9032-1411c9a92c13", "record_id": "flaws_cloudtrail:0000297:fa44af6f-c718-48c2-9032-1411c9a92c13", "row_index": 297, "timestamp": "2019-05-27T23:39:44Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa44af6f-c718-48c2-9032-1411c9a92c13", "eventTime": "2019-05-27T23:39:44Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c716099a-b9d9-4a62-b169-d07769", "record_id": "flaws_cloudtrail:0000298:c716099a-b9d9-4a62-b169-d07769", "row_index": 298, "timestamp": "2019-05-27T23:39:44Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c716099a-b9d9-4a62-b169-d07769", "eventTime": "2019-05-27T23:39:44Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75cf6671-e1d6-4859-a83b-f38daec85598", "record_id": "flaws_cloudtrail:0000299:75cf6671-e1d6-4859-a83b-f38daec85598", "row_index": 299, "timestamp": "2019-05-27T23:39:44Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75cf6671-e1d6-4859-a83b-f38daec85598", "eventTime": "2019-05-27T23:39:44Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e13d7e4e-1e9b-4a0d-819d-5efb5144f11a", "record_id": "flaws_cloudtrail:0000300:e13d7e4e-1e9b-4a0d-819d-5efb5144f11a", "row_index": 300, "timestamp": "2019-05-27T23:39:44Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e13d7e4e-1e9b-4a0d-819d-5efb5144f11a", "eventTime": "2019-05-27T23:39:44Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa44af6f-c718-48c2-9032-1411c9a92c13", "record_id": "flaws_cloudtrail:0000301:fa44af6f-c718-48c2-9032-1411c9a92c13", "row_index": 301, "timestamp": "2019-05-27T23:39:44Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa44af6f-c718-48c2-9032-1411c9a92c13", "eventTime": "2019-05-27T23:39:44Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "153636b-911c-4b61-9e10-dacc68ef9b66", "record_id": "flaws_cloudtrail:0000302:153636b-911c-4b61-9e10-dacc68ef9b66", "row_index": 302, "timestamp": "2019-05-27T23:39:45Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "153636b-911c-4b61-9e10-dacc68ef9b66", "eventTime": "2019-05-27T23:39:45Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc4de76e-8eff-4b5c-bb41-7f497112cc", "record_id": "flaws_cloudtrail:0000303:cc4de76e-8eff-4b5c-bb41-7f497112cc", "row_index": 303, "timestamp": "2019-05-27T23:39:45Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc4de76e-8eff-4b5c-bb41-7f497112cc", "eventTime": "2019-05-27T23:39:45Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af83b537-9a15-4b7d-b193-2efd43761d", "record_id": "flaws_cloudtrail:0000304:af83b537-9a15-4b7d-b193-2efd43761d", "row_index": 304, "timestamp": "2019-05-27T23:39:45Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af83b537-9a15-4b7d-b193-2efd43761d", "eventTime": "2019-05-27T23:39:45Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "153636b-911c-4b61-9e10-dacc68ef9b66", "record_id": "flaws_cloudtrail:0000305:153636b-911c-4b61-9e10-dacc68ef9b66", "row_index": 305, "timestamp": "2019-05-27T23:39:45Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "153636b-911c-4b61-9e10-dacc68ef9b66", "eventTime": "2019-05-27T23:39:45Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc4de76e-8eff-4b5c-bb41-7f497112cc", "record_id": "flaws_cloudtrail:0000306:cc4de76e-8eff-4b5c-bb41-7f497112cc", "row_index": 306, "timestamp": "2019-05-27T23:39:45Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc4de76e-8eff-4b5c-bb41-7f497112cc", "eventTime": "2019-05-27T23:39:45Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af83b537-9a15-4b7d-b193-2efd43761d", "record_id": "flaws_cloudtrail:0000307:af83b537-9a15-4b7d-b193-2efd43761d", "row_index": 307, "timestamp": "2019-05-27T23:39:45Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af83b537-9a15-4b7d-b193-2efd43761d", "eventTime": "2019-05-27T23:39:45Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "432827a08-b5b0-421a-8e19-e47274d652", "record_id": "flaws_cloudtrail:0000308:432827a08-b5b0-421a-8e19-e47274d652", "row_index": 308, "timestamp": "2019-05-27T23:39:46Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "432827a08-b5b0-421a-8e19-e47274d652", "eventTime": "2019-05-27T23:39:46Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "432827a08-b5b0-421a-8e19-e47274d652", "record_id": "flaws_cloudtrail:0000309:432827a08-b5b0-421a-8e19-e47274d652", "row_index": 309, "timestamp": "2019-05-27T23:39:46Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "432827a08-b5b0-421a-8e19-e47274d652", "eventTime": "2019-05-27T23:39:46Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3790e0b1-f46e-433e-b5c4-266ca1074ab3", "record_id": "flaws_cloudtrail:0000310:3790e0b1-f46e-433e-b5c4-266ca1074ab3", "row_index": 310, "timestamp": "2019-05-27T23:39:47Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3790e0b1-f46e-433e-b5c4-266ca1074ab3", "eventTime": "2019-05-27T23:39:47Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91a25b31-a833-46d6-9cd6-3d8ec221686b5", "record_id": "flaws_cloudtrail:0000311:91a25b31-a833-46d6-9cd6-3d8ec221686b5", "row_index": 311, "timestamp": "2019-05-27T23:39:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91a25b31-a833-46d6-9cd6-3d8ec221686b5", "eventTime": "2019-05-27T23:39:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3790e0b1-f46e-433e-b5c4-266ca1074ab3", "record_id": "flaws_cloudtrail:0000312:3790e0b1-f46e-433e-b5c4-266ca1074ab3", "row_index": 312, "timestamp": "2019-05-27T23:39:47Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3790e0b1-f46e-433e-b5c4-266ca1074ab3", "eventTime": "2019-05-27T23:39:47Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91a25b31-a833-46d6-9cd6-3d8ec221686b5", "record_id": "flaws_cloudtrail:0000313:91a25b31-a833-46d6-9cd6-3d8ec221686b5", "row_index": 313, "timestamp": "2019-05-27T23:39:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91a25b31-a833-46d6-9cd6-3d8ec221686b5", "eventTime": "2019-05-27T23:39:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "026155e-ee0c-437c-a0e2-2f3f563dac67", "record_id": "flaws_cloudtrail:0000314:026155e-ee0c-437c-a0e2-2f3f563dac67", "row_index": 314, "timestamp": "2019-05-27T23:39:48Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "026155e-ee0c-437c-a0e2-2f3f563dac67", "eventTime": "2019-05-27T23:39:48Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f44177d5-5284-4a4b-b2c5-6bb6d8cad573", "record_id": "flaws_cloudtrail:0000315:f44177d5-5284-4a4b-b2c5-6bb6d8cad573", "row_index": 315, "timestamp": "2019-05-27T23:39:48Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f44177d5-5284-4a4b-b2c5-6bb6d8cad573", "eventTime": "2019-05-27T23:39:48Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "896715c-ed4e-4c4a-b9c3-e4ebd81b8568", "record_id": "flaws_cloudtrail:0000316:896715c-ed4e-4c4a-b9c3-e4ebd81b8568", "row_index": 316, "timestamp": "2019-05-27T23:39:48Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "896715c-ed4e-4c4a-b9c3-e4ebd81b8568", "eventTime": "2019-05-27T23:39:48Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dbf6c8e-d6ec-4cb2-ba8d-72f830a6608d", "record_id": "flaws_cloudtrail:0000317:3dbf6c8e-d6ec-4cb2-ba8d-72f830a6608d", "row_index": 317, "timestamp": "2019-05-27T23:39:48Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dbf6c8e-d6ec-4cb2-ba8d-72f830a6608d", "eventTime": "2019-05-27T23:39:48Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "026155e-ee0c-437c-a0e2-2f3f563dac67", "record_id": "flaws_cloudtrail:0000318:026155e-ee0c-437c-a0e2-2f3f563dac67", "row_index": 318, "timestamp": "2019-05-27T23:39:48Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "026155e-ee0c-437c-a0e2-2f3f563dac67", "eventTime": "2019-05-27T23:39:48Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f44177d5-5284-4a4b-b2c5-6bb6d8cad573", "record_id": "flaws_cloudtrail:0000319:f44177d5-5284-4a4b-b2c5-6bb6d8cad573", "row_index": 319, "timestamp": "2019-05-27T23:39:48Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f44177d5-5284-4a4b-b2c5-6bb6d8cad573", "eventTime": "2019-05-27T23:39:48Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "896715c-ed4e-4c4a-b9c3-e4ebd81b8568", "record_id": "flaws_cloudtrail:0000320:896715c-ed4e-4c4a-b9c3-e4ebd81b8568", "row_index": 320, "timestamp": "2019-05-27T23:39:48Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "896715c-ed4e-4c4a-b9c3-e4ebd81b8568", "eventTime": "2019-05-27T23:39:48Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dbf6c8e-d6ec-4cb2-ba8d-72f830a6608d", "record_id": "flaws_cloudtrail:0000321:3dbf6c8e-d6ec-4cb2-ba8d-72f830a6608d", "row_index": 321, "timestamp": "2019-05-27T23:39:48Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dbf6c8e-d6ec-4cb2-ba8d-72f830a6608d", "eventTime": "2019-05-27T23:39:48Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "216e1c8b-b02a-4f5f-ac81-85e96bbe5d43", "record_id": "flaws_cloudtrail:0000322:216e1c8b-b02a-4f5f-ac81-85e96bbe5d43", "row_index": 322, "timestamp": "2019-05-27T23:39:49Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "216e1c8b-b02a-4f5f-ac81-85e96bbe5d43", "eventTime": "2019-05-27T23:39:49Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd7e6224-6d5d-46b9-9268-d655d3302cda", "record_id": "flaws_cloudtrail:0000323:dd7e6224-6d5d-46b9-9268-d655d3302cda", "row_index": 323, "timestamp": "2019-05-27T23:39:49Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd7e6224-6d5d-46b9-9268-d655d3302cda", "eventTime": "2019-05-27T23:39:49Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "248418-a621-4baf-94b8-52e506553acd", "record_id": "flaws_cloudtrail:0000324:248418-a621-4baf-94b8-52e506553acd", "row_index": 324, "timestamp": "2019-05-27T23:39:49Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "248418-a621-4baf-94b8-52e506553acd", "eventTime": "2019-05-27T23:39:49Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "216e1c8b-b02a-4f5f-ac81-85e96bbe5d43", "record_id": "flaws_cloudtrail:0000325:216e1c8b-b02a-4f5f-ac81-85e96bbe5d43", "row_index": 325, "timestamp": "2019-05-27T23:39:49Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "216e1c8b-b02a-4f5f-ac81-85e96bbe5d43", "eventTime": "2019-05-27T23:39:49Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd7e6224-6d5d-46b9-9268-d655d3302cda", "record_id": "flaws_cloudtrail:0000326:dd7e6224-6d5d-46b9-9268-d655d3302cda", "row_index": 326, "timestamp": "2019-05-27T23:39:49Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd7e6224-6d5d-46b9-9268-d655d3302cda", "eventTime": "2019-05-27T23:39:49Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "248418-a621-4baf-94b8-52e506553acd", "record_id": "flaws_cloudtrail:0000327:248418-a621-4baf-94b8-52e506553acd", "row_index": 327, "timestamp": "2019-05-27T23:39:49Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "248418-a621-4baf-94b8-52e506553acd", "eventTime": "2019-05-27T23:39:49Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "077f6dd6-78c3-4e29-b5e8-4f74a41cfdb6", "record_id": "flaws_cloudtrail:0000328:077f6dd6-78c3-4e29-b5e8-4f74a41cfdb6", "row_index": 328, "timestamp": "2019-05-27T23:39:50Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "077f6dd6-78c3-4e29-b5e8-4f74a41cfdb6", "eventTime": "2019-05-27T23:39:50Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe3b681a-cfb3-4346-adc8-a59947fbe023", "record_id": "flaws_cloudtrail:0000329:fe3b681a-cfb3-4346-adc8-a59947fbe023", "row_index": 329, "timestamp": "2019-05-27T23:39:50Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe3b681a-cfb3-4346-adc8-a59947fbe023", "eventTime": "2019-05-27T23:39:50Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "990ebeb3-28ed-435a-be7b-0181ba2a0815", "record_id": "flaws_cloudtrail:0000330:990ebeb3-28ed-435a-be7b-0181ba2a0815", "row_index": 330, "timestamp": "2019-05-27T23:39:50Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "990ebeb3-28ed-435a-be7b-0181ba2a0815", "eventTime": "2019-05-27T23:39:50Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "077f6dd6-78c3-4e29-b5e8-4f74a41cfdb6", "record_id": "flaws_cloudtrail:0000331:077f6dd6-78c3-4e29-b5e8-4f74a41cfdb6", "row_index": 331, "timestamp": "2019-05-27T23:39:50Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "077f6dd6-78c3-4e29-b5e8-4f74a41cfdb6", "eventTime": "2019-05-27T23:39:50Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe3b681a-cfb3-4346-adc8-a59947fbe023", "record_id": "flaws_cloudtrail:0000332:fe3b681a-cfb3-4346-adc8-a59947fbe023", "row_index": 332, "timestamp": "2019-05-27T23:39:50Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe3b681a-cfb3-4346-adc8-a59947fbe023", "eventTime": "2019-05-27T23:39:50Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "990ebeb3-28ed-435a-be7b-0181ba2a0815", "record_id": "flaws_cloudtrail:0000333:990ebeb3-28ed-435a-be7b-0181ba2a0815", "row_index": 333, "timestamp": "2019-05-27T23:39:50Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "990ebeb3-28ed-435a-be7b-0181ba2a0815", "eventTime": "2019-05-27T23:39:50Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7f1a56b-355a-40ed-882c-78bc0c94416e", "record_id": "flaws_cloudtrail:0000334:e7f1a56b-355a-40ed-882c-78bc0c94416e", "row_index": 334, "timestamp": "2019-05-27T23:39:51Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7f1a56b-355a-40ed-882c-78bc0c94416e", "eventTime": "2019-05-27T23:39:51Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7f1a56b-355a-40ed-882c-78bc0c94416e", "record_id": "flaws_cloudtrail:0000335:e7f1a56b-355a-40ed-882c-78bc0c94416e", "row_index": 335, "timestamp": "2019-05-27T23:39:51Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7f1a56b-355a-40ed-882c-78bc0c94416e", "eventTime": "2019-05-27T23:39:51Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5e470b8-58e2-4aae-aed2-19675fe8", "record_id": "flaws_cloudtrail:0000336:f5e470b8-58e2-4aae-aed2-19675fe8", "row_index": 336, "timestamp": "2019-05-27T23:39:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5e470b8-58e2-4aae-aed2-19675fe8", "eventTime": "2019-05-27T23:39:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5e470b8-58e2-4aae-aed2-19675fe8", "record_id": "flaws_cloudtrail:0000337:f5e470b8-58e2-4aae-aed2-19675fe8", "row_index": 337, "timestamp": "2019-05-27T23:39:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5e470b8-58e2-4aae-aed2-19675fe8", "eventTime": "2019-05-27T23:39:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b9295d6-b296-48c7-8f1d-65cbd4e29342", "record_id": "flaws_cloudtrail:0000338:9b9295d6-b296-48c7-8f1d-65cbd4e29342", "row_index": 338, "timestamp": "2019-05-27T23:39:53Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b9295d6-b296-48c7-8f1d-65cbd4e29342", "eventTime": "2019-05-27T23:39:53Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdea0058-8c80-4ae2-8179-428c012dd209", "record_id": "flaws_cloudtrail:0000339:fdea0058-8c80-4ae2-8179-428c012dd209", "row_index": 339, "timestamp": "2019-05-27T23:39:53Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdea0058-8c80-4ae2-8179-428c012dd209", "eventTime": "2019-05-27T23:39:53Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "841654b-df2f-4a87-870c-a1308eb49701", "record_id": "flaws_cloudtrail:0000340:841654b-df2f-4a87-870c-a1308eb49701", "row_index": 340, "timestamp": "2019-05-27T23:39:53Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "841654b-df2f-4a87-870c-a1308eb49701", "eventTime": "2019-05-27T23:39:53Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b9295d6-b296-48c7-8f1d-65cbd4e29342", "record_id": "flaws_cloudtrail:0000341:9b9295d6-b296-48c7-8f1d-65cbd4e29342", "row_index": 341, "timestamp": "2019-05-27T23:39:53Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b9295d6-b296-48c7-8f1d-65cbd4e29342", "eventTime": "2019-05-27T23:39:53Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdea0058-8c80-4ae2-8179-428c012dd209", "record_id": "flaws_cloudtrail:0000342:fdea0058-8c80-4ae2-8179-428c012dd209", "row_index": 342, "timestamp": "2019-05-27T23:39:53Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdea0058-8c80-4ae2-8179-428c012dd209", "eventTime": "2019-05-27T23:39:53Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "841654b-df2f-4a87-870c-a1308eb49701", "record_id": "flaws_cloudtrail:0000343:841654b-df2f-4a87-870c-a1308eb49701", "row_index": 343, "timestamp": "2019-05-27T23:39:53Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "841654b-df2f-4a87-870c-a1308eb49701", "eventTime": "2019-05-27T23:39:53Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd2edc35-68a0-4bab-b329-bb65471a72d5", "record_id": "flaws_cloudtrail:0000344:bd2edc35-68a0-4bab-b329-bb65471a72d5", "row_index": 344, "timestamp": "2019-05-27T23:39:54Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd2edc35-68a0-4bab-b329-bb65471a72d5", "eventTime": "2019-05-27T23:39:54Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae4d6bbb-6205-45f2-ba30-fa61639b1769", "record_id": "flaws_cloudtrail:0000345:ae4d6bbb-6205-45f2-ba30-fa61639b1769", "row_index": 345, "timestamp": "2019-05-27T23:39:54Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae4d6bbb-6205-45f2-ba30-fa61639b1769", "eventTime": "2019-05-27T23:39:54Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc2f1637-5a41-4ca9-95eb-8ca00a910357", "record_id": "flaws_cloudtrail:0000346:cc2f1637-5a41-4ca9-95eb-8ca00a910357", "row_index": 346, "timestamp": "2019-05-27T23:39:54Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc2f1637-5a41-4ca9-95eb-8ca00a910357", "eventTime": "2019-05-27T23:39:54Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd2edc35-68a0-4bab-b329-bb65471a72d5", "record_id": "flaws_cloudtrail:0000347:bd2edc35-68a0-4bab-b329-bb65471a72d5", "row_index": 347, "timestamp": "2019-05-27T23:39:54Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd2edc35-68a0-4bab-b329-bb65471a72d5", "eventTime": "2019-05-27T23:39:54Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae4d6bbb-6205-45f2-ba30-fa61639b1769", "record_id": "flaws_cloudtrail:0000348:ae4d6bbb-6205-45f2-ba30-fa61639b1769", "row_index": 348, "timestamp": "2019-05-27T23:39:54Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae4d6bbb-6205-45f2-ba30-fa61639b1769", "eventTime": "2019-05-27T23:39:54Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc2f1637-5a41-4ca9-95eb-8ca00a910357", "record_id": "flaws_cloudtrail:0000349:cc2f1637-5a41-4ca9-95eb-8ca00a910357", "row_index": 349, "timestamp": "2019-05-27T23:39:54Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc2f1637-5a41-4ca9-95eb-8ca00a910357", "eventTime": "2019-05-27T23:39:54Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "324f19df-5495-4618-83c5-a502cacff697", "record_id": "flaws_cloudtrail:0000350:324f19df-5495-4618-83c5-a502cacff697", "row_index": 350, "timestamp": "2019-05-27T23:39:55Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "324f19df-5495-4618-83c5-a502cacff697", "eventTime": "2019-05-27T23:39:55Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a445808-3335-4d3d-a633-c27f297e7649", "record_id": "flaws_cloudtrail:0000351:2a445808-3335-4d3d-a633-c27f297e7649", "row_index": 351, "timestamp": "2019-05-27T23:39:55Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a445808-3335-4d3d-a633-c27f297e7649", "eventTime": "2019-05-27T23:39:55Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0bbbe7a-ac16-41ae-bbb9-d5fafc1ef18e", "record_id": "flaws_cloudtrail:0000352:b0bbbe7a-ac16-41ae-bbb9-d5fafc1ef18e", "row_index": 352, "timestamp": "2019-05-27T23:39:55Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0bbbe7a-ac16-41ae-bbb9-d5fafc1ef18e", "eventTime": "2019-05-27T23:39:55Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "324f19df-5495-4618-83c5-a502cacff697", "record_id": "flaws_cloudtrail:0000353:324f19df-5495-4618-83c5-a502cacff697", "row_index": 353, "timestamp": "2019-05-27T23:39:55Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "324f19df-5495-4618-83c5-a502cacff697", "eventTime": "2019-05-27T23:39:55Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a445808-3335-4d3d-a633-c27f297e7649", "record_id": "flaws_cloudtrail:0000354:2a445808-3335-4d3d-a633-c27f297e7649", "row_index": 354, "timestamp": "2019-05-27T23:39:55Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a445808-3335-4d3d-a633-c27f297e7649", "eventTime": "2019-05-27T23:39:55Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0bbbe7a-ac16-41ae-bbb9-d5fafc1ef18e", "record_id": "flaws_cloudtrail:0000355:b0bbbe7a-ac16-41ae-bbb9-d5fafc1ef18e", "row_index": 355, "timestamp": "2019-05-27T23:39:55Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0bbbe7a-ac16-41ae-bbb9-d5fafc1ef18e", "eventTime": "2019-05-27T23:39:55Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f469fab-eaa0-4875-8141-a0e5139f108c", "record_id": "flaws_cloudtrail:0000356:3f469fab-eaa0-4875-8141-a0e5139f108c", "row_index": 356, "timestamp": "2019-05-27T23:39:56Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f469fab-eaa0-4875-8141-a0e5139f108c", "eventTime": "2019-05-27T23:39:56Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45b84ad0-f427-42ee-9902-9f724b8616ec", "record_id": "flaws_cloudtrail:0000357:45b84ad0-f427-42ee-9902-9f724b8616ec", "row_index": 357, "timestamp": "2019-05-27T23:39:56Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45b84ad0-f427-42ee-9902-9f724b8616ec", "eventTime": "2019-05-27T23:39:56Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f47c3373-d754-4b9c-b331-887729fcb79", "record_id": "flaws_cloudtrail:0000358:f47c3373-d754-4b9c-b331-887729fcb79", "row_index": 358, "timestamp": "2019-05-27T23:39:56Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f47c3373-d754-4b9c-b331-887729fcb79", "eventTime": "2019-05-27T23:39:56Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f469fab-eaa0-4875-8141-a0e5139f108c", "record_id": "flaws_cloudtrail:0000359:3f469fab-eaa0-4875-8141-a0e5139f108c", "row_index": 359, "timestamp": "2019-05-27T23:39:56Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f469fab-eaa0-4875-8141-a0e5139f108c", "eventTime": "2019-05-27T23:39:56Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45b84ad0-f427-42ee-9902-9f724b8616ec", "record_id": "flaws_cloudtrail:0000360:45b84ad0-f427-42ee-9902-9f724b8616ec", "row_index": 360, "timestamp": "2019-05-27T23:39:56Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45b84ad0-f427-42ee-9902-9f724b8616ec", "eventTime": "2019-05-27T23:39:56Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f47c3373-d754-4b9c-b331-887729fcb79", "record_id": "flaws_cloudtrail:0000361:f47c3373-d754-4b9c-b331-887729fcb79", "row_index": 361, "timestamp": "2019-05-27T23:39:56Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f47c3373-d754-4b9c-b331-887729fcb79", "eventTime": "2019-05-27T23:39:56Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04dad2d1-0d55-4e15-8eee-66e241c6fd17", "record_id": "flaws_cloudtrail:0000362:04dad2d1-0d55-4e15-8eee-66e241c6fd17", "row_index": 362, "timestamp": "2019-05-27T23:39:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04dad2d1-0d55-4e15-8eee-66e241c6fd17", "eventTime": "2019-05-27T23:39:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52979-0e67-4836-864a-17ee5a314b76", "record_id": "flaws_cloudtrail:0000363:52979-0e67-4836-864a-17ee5a314b76", "row_index": 363, "timestamp": "2019-05-27T23:39:57Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52979-0e67-4836-864a-17ee5a314b76", "eventTime": "2019-05-27T23:39:57Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "132d74e9-1863-4297-9923-6a12d8d2cf11", "record_id": "flaws_cloudtrail:0000364:132d74e9-1863-4297-9923-6a12d8d2cf11", "row_index": 364, "timestamp": "2019-05-27T23:39:57Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "132d74e9-1863-4297-9923-6a12d8d2cf11", "eventTime": "2019-05-27T23:39:57Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f17f2064-757e-4488-8160-c03d280f4202", "record_id": "flaws_cloudtrail:0000365:f17f2064-757e-4488-8160-c03d280f4202", "row_index": 365, "timestamp": "2019-05-27T23:39:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f17f2064-757e-4488-8160-c03d280f4202", "eventTime": "2019-05-27T23:39:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6be7c240-25bf-4ffa-8e2c-de3398a734d6", "record_id": "flaws_cloudtrail:0000366:6be7c240-25bf-4ffa-8e2c-de3398a734d6", "row_index": 366, "timestamp": "2019-05-27T23:39:57Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6be7c240-25bf-4ffa-8e2c-de3398a734d6", "eventTime": "2019-05-27T23:39:57Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3aa0a689-d4dd-4175-9e0f-ef08f0ba9943", "record_id": "flaws_cloudtrail:0000367:3aa0a689-d4dd-4175-9e0f-ef08f0ba9943", "row_index": 367, "timestamp": "2019-05-27T23:39:57Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3aa0a689-d4dd-4175-9e0f-ef08f0ba9943", "eventTime": "2019-05-27T23:39:57Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04dad2d1-0d55-4e15-8eee-66e241c6fd17", "record_id": "flaws_cloudtrail:0000368:04dad2d1-0d55-4e15-8eee-66e241c6fd17", "row_index": 368, "timestamp": "2019-05-27T23:39:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04dad2d1-0d55-4e15-8eee-66e241c6fd17", "eventTime": "2019-05-27T23:39:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52979-0e67-4836-864a-17ee5a314b76", "record_id": "flaws_cloudtrail:0000369:52979-0e67-4836-864a-17ee5a314b76", "row_index": 369, "timestamp": "2019-05-27T23:39:57Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52979-0e67-4836-864a-17ee5a314b76", "eventTime": "2019-05-27T23:39:57Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "132d74e9-1863-4297-9923-6a12d8d2cf11", "record_id": "flaws_cloudtrail:0000370:132d74e9-1863-4297-9923-6a12d8d2cf11", "row_index": 370, "timestamp": "2019-05-27T23:39:57Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "132d74e9-1863-4297-9923-6a12d8d2cf11", "eventTime": "2019-05-27T23:39:57Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f17f2064-757e-4488-8160-c03d280f4202", "record_id": "flaws_cloudtrail:0000371:f17f2064-757e-4488-8160-c03d280f4202", "row_index": 371, "timestamp": "2019-05-27T23:39:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f17f2064-757e-4488-8160-c03d280f4202", "eventTime": "2019-05-27T23:39:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6be7c240-25bf-4ffa-8e2c-de3398a734d6", "record_id": "flaws_cloudtrail:0000372:6be7c240-25bf-4ffa-8e2c-de3398a734d6", "row_index": 372, "timestamp": "2019-05-27T23:39:57Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6be7c240-25bf-4ffa-8e2c-de3398a734d6", "eventTime": "2019-05-27T23:39:57Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3aa0a689-d4dd-4175-9e0f-ef08f0ba9943", "record_id": "flaws_cloudtrail:0000373:3aa0a689-d4dd-4175-9e0f-ef08f0ba9943", "row_index": 373, "timestamp": "2019-05-27T23:39:57Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3aa0a689-d4dd-4175-9e0f-ef08f0ba9943", "eventTime": "2019-05-27T23:39:57Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "186101e-0435-435e-91ce-bc148773b06c", "record_id": "flaws_cloudtrail:0000374:186101e-0435-435e-91ce-bc148773b06c", "row_index": 374, "timestamp": "2019-05-27T23:39:58Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "186101e-0435-435e-91ce-bc148773b06c", "eventTime": "2019-05-27T23:39:58Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73eac313-137a-4a26-af12-7b91e96862", "record_id": "flaws_cloudtrail:0000375:73eac313-137a-4a26-af12-7b91e96862", "row_index": 375, "timestamp": "2019-05-27T23:39:58Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73eac313-137a-4a26-af12-7b91e96862", "eventTime": "2019-05-27T23:39:58Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc2646e3-602b-43c8-ae15-7a819f9e3b4f", "record_id": "flaws_cloudtrail:0000376:bc2646e3-602b-43c8-ae15-7a819f9e3b4f", "row_index": 376, "timestamp": "2019-05-27T23:39:58Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc2646e3-602b-43c8-ae15-7a819f9e3b4f", "eventTime": "2019-05-27T23:39:58Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02fb3c16-97b6-4889-b855-119436c06a9e", "record_id": "flaws_cloudtrail:0000377:02fb3c16-97b6-4889-b855-119436c06a9e", "row_index": 377, "timestamp": "2019-05-27T23:39:58Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02fb3c16-97b6-4889-b855-119436c06a9e", "eventTime": "2019-05-27T23:39:58Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a5ac60b-9c7c-4211-8ef4-f9e3bacd823e", "record_id": "flaws_cloudtrail:0000378:1a5ac60b-9c7c-4211-8ef4-f9e3bacd823e", "row_index": 378, "timestamp": "2019-05-27T23:39:58Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a5ac60b-9c7c-4211-8ef4-f9e3bacd823e", "eventTime": "2019-05-27T23:39:58Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62c0979b-1fdd-4e98-a116-8884ffc3d9ba", "record_id": "flaws_cloudtrail:0000379:62c0979b-1fdd-4e98-a116-8884ffc3d9ba", "row_index": 379, "timestamp": "2019-05-27T23:39:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62c0979b-1fdd-4e98-a116-8884ffc3d9ba", "eventTime": "2019-05-27T23:39:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c6cb23a-d606-43a5-9dd1-57e10c577978", "record_id": "flaws_cloudtrail:0000380:1c6cb23a-d606-43a5-9dd1-57e10c577978", "row_index": 380, "timestamp": "2019-05-27T23:39:58Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c6cb23a-d606-43a5-9dd1-57e10c577978", "eventTime": "2019-05-27T23:39:58Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "186101e-0435-435e-91ce-bc148773b06c", "record_id": "flaws_cloudtrail:0000381:186101e-0435-435e-91ce-bc148773b06c", "row_index": 381, "timestamp": "2019-05-27T23:39:58Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "186101e-0435-435e-91ce-bc148773b06c", "eventTime": "2019-05-27T23:39:58Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73eac313-137a-4a26-af12-7b91e96862", "record_id": "flaws_cloudtrail:0000382:73eac313-137a-4a26-af12-7b91e96862", "row_index": 382, "timestamp": "2019-05-27T23:39:58Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73eac313-137a-4a26-af12-7b91e96862", "eventTime": "2019-05-27T23:39:58Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc2646e3-602b-43c8-ae15-7a819f9e3b4f", "record_id": "flaws_cloudtrail:0000383:bc2646e3-602b-43c8-ae15-7a819f9e3b4f", "row_index": 383, "timestamp": "2019-05-27T23:39:58Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc2646e3-602b-43c8-ae15-7a819f9e3b4f", "eventTime": "2019-05-27T23:39:58Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02fb3c16-97b6-4889-b855-119436c06a9e", "record_id": "flaws_cloudtrail:0000384:02fb3c16-97b6-4889-b855-119436c06a9e", "row_index": 384, "timestamp": "2019-05-27T23:39:58Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02fb3c16-97b6-4889-b855-119436c06a9e", "eventTime": "2019-05-27T23:39:58Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a5ac60b-9c7c-4211-8ef4-f9e3bacd823e", "record_id": "flaws_cloudtrail:0000385:1a5ac60b-9c7c-4211-8ef4-f9e3bacd823e", "row_index": 385, "timestamp": "2019-05-27T23:39:58Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a5ac60b-9c7c-4211-8ef4-f9e3bacd823e", "eventTime": "2019-05-27T23:39:58Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62c0979b-1fdd-4e98-a116-8884ffc3d9ba", "record_id": "flaws_cloudtrail:0000386:62c0979b-1fdd-4e98-a116-8884ffc3d9ba", "row_index": 386, "timestamp": "2019-05-27T23:39:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62c0979b-1fdd-4e98-a116-8884ffc3d9ba", "eventTime": "2019-05-27T23:39:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c6cb23a-d606-43a5-9dd1-57e10c577978", "record_id": "flaws_cloudtrail:0000387:1c6cb23a-d606-43a5-9dd1-57e10c577978", "row_index": 387, "timestamp": "2019-05-27T23:39:58Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c6cb23a-d606-43a5-9dd1-57e10c577978", "eventTime": "2019-05-27T23:39:58Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a08477d-acd0-4bb8-b9d9-bb3343a6aaa2", "record_id": "flaws_cloudtrail:0000388:a08477d-acd0-4bb8-b9d9-bb3343a6aaa2", "row_index": 388, "timestamp": "2019-05-27T23:39:59Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a08477d-acd0-4bb8-b9d9-bb3343a6aaa2", "eventTime": "2019-05-27T23:39:59Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5fddbe6-1d9f-4648-9a20-8f6cf1beb697", "record_id": "flaws_cloudtrail:0000389:b5fddbe6-1d9f-4648-9a20-8f6cf1beb697", "row_index": 389, "timestamp": "2019-05-27T23:39:59Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5fddbe6-1d9f-4648-9a20-8f6cf1beb697", "eventTime": "2019-05-27T23:39:59Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffa67b2e-85ae-49e0-af63-5d7bce0116e5", "record_id": "flaws_cloudtrail:0000390:ffa67b2e-85ae-49e0-af63-5d7bce0116e5", "row_index": 390, "timestamp": "2019-05-27T23:39:59Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffa67b2e-85ae-49e0-af63-5d7bce0116e5", "eventTime": "2019-05-27T23:39:59Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c639304-b1c2-476a-908d-dbc5291db861", "record_id": "flaws_cloudtrail:0000391:c639304-b1c2-476a-908d-dbc5291db861", "row_index": 391, "timestamp": "2019-05-27T23:39:59Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c639304-b1c2-476a-908d-dbc5291db861", "eventTime": "2019-05-27T23:39:59Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "095daf96-09c4-4927-ba00-9ebb4e9a5407", "record_id": "flaws_cloudtrail:0000392:095daf96-09c4-4927-ba00-9ebb4e9a5407", "row_index": 392, "timestamp": "2019-05-27T23:39:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "095daf96-09c4-4927-ba00-9ebb4e9a5407", "eventTime": "2019-05-27T23:39:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a08477d-acd0-4bb8-b9d9-bb3343a6aaa2", "record_id": "flaws_cloudtrail:0000393:a08477d-acd0-4bb8-b9d9-bb3343a6aaa2", "row_index": 393, "timestamp": "2019-05-27T23:39:59Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a08477d-acd0-4bb8-b9d9-bb3343a6aaa2", "eventTime": "2019-05-27T23:39:59Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5fddbe6-1d9f-4648-9a20-8f6cf1beb697", "record_id": "flaws_cloudtrail:0000394:b5fddbe6-1d9f-4648-9a20-8f6cf1beb697", "row_index": 394, "timestamp": "2019-05-27T23:39:59Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5fddbe6-1d9f-4648-9a20-8f6cf1beb697", "eventTime": "2019-05-27T23:39:59Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffa67b2e-85ae-49e0-af63-5d7bce0116e5", "record_id": "flaws_cloudtrail:0000395:ffa67b2e-85ae-49e0-af63-5d7bce0116e5", "row_index": 395, "timestamp": "2019-05-27T23:39:59Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffa67b2e-85ae-49e0-af63-5d7bce0116e5", "eventTime": "2019-05-27T23:39:59Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c639304-b1c2-476a-908d-dbc5291db861", "record_id": "flaws_cloudtrail:0000396:c639304-b1c2-476a-908d-dbc5291db861", "row_index": 396, "timestamp": "2019-05-27T23:39:59Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c639304-b1c2-476a-908d-dbc5291db861", "eventTime": "2019-05-27T23:39:59Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "095daf96-09c4-4927-ba00-9ebb4e9a5407", "record_id": "flaws_cloudtrail:0000397:095daf96-09c4-4927-ba00-9ebb4e9a5407", "row_index": 397, "timestamp": "2019-05-27T23:39:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "095daf96-09c4-4927-ba00-9ebb4e9a5407", "eventTime": "2019-05-27T23:39:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "584272-fc53-44e7-be77-cd470186", "record_id": "flaws_cloudtrail:0000398:584272-fc53-44e7-be77-cd470186", "row_index": 398, "timestamp": "2019-05-27T23:40:00Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "584272-fc53-44e7-be77-cd470186", "eventTime": "2019-05-27T23:40:00Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605bbea8-89ca-4fd4-927c-0fad53c7df1a", "record_id": "flaws_cloudtrail:0000399:605bbea8-89ca-4fd4-927c-0fad53c7df1a", "row_index": 399, "timestamp": "2019-05-27T23:40:00Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605bbea8-89ca-4fd4-927c-0fad53c7df1a", "eventTime": "2019-05-27T23:40:00Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b396a5c-e46c-4249-965e-b0dc5ee290f8", "record_id": "flaws_cloudtrail:0000400:0b396a5c-e46c-4249-965e-b0dc5ee290f8", "row_index": 400, "timestamp": "2019-05-27T23:40:00Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b396a5c-e46c-4249-965e-b0dc5ee290f8", "eventTime": "2019-05-27T23:40:00Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d014d43f-eba4-48b8-9f24-ab16d497446f", "record_id": "flaws_cloudtrail:0000401:d014d43f-eba4-48b8-9f24-ab16d497446f", "row_index": 401, "timestamp": "2019-05-27T23:40:00Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d014d43f-eba4-48b8-9f24-ab16d497446f", "eventTime": "2019-05-27T23:40:00Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bd7f52b-5330-493c-9f61-ad8db111c1d3", "record_id": "flaws_cloudtrail:0000402:8bd7f52b-5330-493c-9f61-ad8db111c1d3", "row_index": 402, "timestamp": "2019-05-27T23:40:00Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bd7f52b-5330-493c-9f61-ad8db111c1d3", "eventTime": "2019-05-27T23:40:00Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "584272-fc53-44e7-be77-cd470186", "record_id": "flaws_cloudtrail:0000403:584272-fc53-44e7-be77-cd470186", "row_index": 403, "timestamp": "2019-05-27T23:40:00Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "584272-fc53-44e7-be77-cd470186", "eventTime": "2019-05-27T23:40:00Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605bbea8-89ca-4fd4-927c-0fad53c7df1a", "record_id": "flaws_cloudtrail:0000404:605bbea8-89ca-4fd4-927c-0fad53c7df1a", "row_index": 404, "timestamp": "2019-05-27T23:40:00Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605bbea8-89ca-4fd4-927c-0fad53c7df1a", "eventTime": "2019-05-27T23:40:00Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b396a5c-e46c-4249-965e-b0dc5ee290f8", "record_id": "flaws_cloudtrail:0000405:0b396a5c-e46c-4249-965e-b0dc5ee290f8", "row_index": 405, "timestamp": "2019-05-27T23:40:00Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b396a5c-e46c-4249-965e-b0dc5ee290f8", "eventTime": "2019-05-27T23:40:00Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d014d43f-eba4-48b8-9f24-ab16d497446f", "record_id": "flaws_cloudtrail:0000406:d014d43f-eba4-48b8-9f24-ab16d497446f", "row_index": 406, "timestamp": "2019-05-27T23:40:00Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d014d43f-eba4-48b8-9f24-ab16d497446f", "eventTime": "2019-05-27T23:40:00Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bd7f52b-5330-493c-9f61-ad8db111c1d3", "record_id": "flaws_cloudtrail:0000407:8bd7f52b-5330-493c-9f61-ad8db111c1d3", "row_index": 407, "timestamp": "2019-05-27T23:40:00Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bd7f52b-5330-493c-9f61-ad8db111c1d3", "eventTime": "2019-05-27T23:40:00Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31724b6d-0920-4ad1-9a61-a9a126767c14", "record_id": "flaws_cloudtrail:0000408:31724b6d-0920-4ad1-9a61-a9a126767c14", "row_index": 408, "timestamp": "2019-05-27T23:40:01Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31724b6d-0920-4ad1-9a61-a9a126767c14", "eventTime": "2019-05-27T23:40:01Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "619cc7ad-c16b-430d-9c0e-ade9a390a166", "record_id": "flaws_cloudtrail:0000409:619cc7ad-c16b-430d-9c0e-ade9a390a166", "row_index": 409, "timestamp": "2019-05-27T23:40:01Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "619cc7ad-c16b-430d-9c0e-ade9a390a166", "eventTime": "2019-05-27T23:40:01Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "390c31ed-a7a5-49bf-967e-dd0dba68164a", "record_id": "flaws_cloudtrail:0000410:390c31ed-a7a5-49bf-967e-dd0dba68164a", "row_index": 410, "timestamp": "2019-05-27T23:40:01Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "390c31ed-a7a5-49bf-967e-dd0dba68164a", "eventTime": "2019-05-27T23:40:01Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31724b6d-0920-4ad1-9a61-a9a126767c14", "record_id": "flaws_cloudtrail:0000411:31724b6d-0920-4ad1-9a61-a9a126767c14", "row_index": 411, "timestamp": "2019-05-27T23:40:01Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31724b6d-0920-4ad1-9a61-a9a126767c14", "eventTime": "2019-05-27T23:40:01Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "619cc7ad-c16b-430d-9c0e-ade9a390a166", "record_id": "flaws_cloudtrail:0000412:619cc7ad-c16b-430d-9c0e-ade9a390a166", "row_index": 412, "timestamp": "2019-05-27T23:40:01Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "619cc7ad-c16b-430d-9c0e-ade9a390a166", "eventTime": "2019-05-27T23:40:01Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "390c31ed-a7a5-49bf-967e-dd0dba68164a", "record_id": "flaws_cloudtrail:0000413:390c31ed-a7a5-49bf-967e-dd0dba68164a", "row_index": 413, "timestamp": "2019-05-27T23:40:01Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "390c31ed-a7a5-49bf-967e-dd0dba68164a", "eventTime": "2019-05-27T23:40:01Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfdfb1a8-0f1e-4c1e-be94-ade5637b8f9a", "record_id": "flaws_cloudtrail:0000414:bfdfb1a8-0f1e-4c1e-be94-ade5637b8f9a", "row_index": 414, "timestamp": "2019-05-27T23:40:02Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfdfb1a8-0f1e-4c1e-be94-ade5637b8f9a", "eventTime": "2019-05-27T23:40:02Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a85f556-27d7-4543-ae26-d6b09cb031a1", "record_id": "flaws_cloudtrail:0000415:6a85f556-27d7-4543-ae26-d6b09cb031a1", "row_index": 415, "timestamp": "2019-05-27T23:40:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a85f556-27d7-4543-ae26-d6b09cb031a1", "eventTime": "2019-05-27T23:40:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4e042154-4e28-4e8c-b230-ec65f5be3669", "record_id": "flaws_cloudtrail:0000416:e4e042154-4e28-4e8c-b230-ec65f5be3669", "row_index": 416, "timestamp": "2019-05-27T23:40:02Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4e042154-4e28-4e8c-b230-ec65f5be3669", "eventTime": "2019-05-27T23:40:02Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6b213c5-3acf-49c3-8f72-8444f13e3858", "record_id": "flaws_cloudtrail:0000417:d6b213c5-3acf-49c3-8f72-8444f13e3858", "row_index": 417, "timestamp": "2019-05-27T23:40:02Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6b213c5-3acf-49c3-8f72-8444f13e3858", "eventTime": "2019-05-27T23:40:02Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfdfb1a8-0f1e-4c1e-be94-ade5637b8f9a", "record_id": "flaws_cloudtrail:0000418:bfdfb1a8-0f1e-4c1e-be94-ade5637b8f9a", "row_index": 418, "timestamp": "2019-05-27T23:40:02Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfdfb1a8-0f1e-4c1e-be94-ade5637b8f9a", "eventTime": "2019-05-27T23:40:02Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a85f556-27d7-4543-ae26-d6b09cb031a1", "record_id": "flaws_cloudtrail:0000419:6a85f556-27d7-4543-ae26-d6b09cb031a1", "row_index": 419, "timestamp": "2019-05-27T23:40:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a85f556-27d7-4543-ae26-d6b09cb031a1", "eventTime": "2019-05-27T23:40:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4e042154-4e28-4e8c-b230-ec65f5be3669", "record_id": "flaws_cloudtrail:0000420:e4e042154-4e28-4e8c-b230-ec65f5be3669", "row_index": 420, "timestamp": "2019-05-27T23:40:02Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4e042154-4e28-4e8c-b230-ec65f5be3669", "eventTime": "2019-05-27T23:40:02Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6b213c5-3acf-49c3-8f72-8444f13e3858", "record_id": "flaws_cloudtrail:0000421:d6b213c5-3acf-49c3-8f72-8444f13e3858", "row_index": 421, "timestamp": "2019-05-27T23:40:02Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6b213c5-3acf-49c3-8f72-8444f13e3858", "eventTime": "2019-05-27T23:40:02Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "589798e0-8049-4236-849f-d9aa327cdfa7", "record_id": "flaws_cloudtrail:0000422:589798e0-8049-4236-849f-d9aa327cdfa7", "row_index": 422, "timestamp": "2019-05-27T23:40:03Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "589798e0-8049-4236-849f-d9aa327cdfa7", "eventTime": "2019-05-27T23:40:03Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a219d11-1cf6-4185-a765-4a42b64eed8c", "record_id": "flaws_cloudtrail:0000423:2a219d11-1cf6-4185-a765-4a42b64eed8c", "row_index": 423, "timestamp": "2019-05-27T23:40:03Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a219d11-1cf6-4185-a765-4a42b64eed8c", "eventTime": "2019-05-27T23:40:03Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b125f78c-97fc-42f2-9913-124776bfbd", "record_id": "flaws_cloudtrail:0000424:b125f78c-97fc-42f2-9913-124776bfbd", "row_index": 424, "timestamp": "2019-05-27T23:40:03Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b125f78c-97fc-42f2-9913-124776bfbd", "eventTime": "2019-05-27T23:40:03Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03369a1-546c-413a-a558-2fbbc4b933ef", "record_id": "flaws_cloudtrail:0000425:03369a1-546c-413a-a558-2fbbc4b933ef", "row_index": 425, "timestamp": "2019-05-27T23:40:03Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03369a1-546c-413a-a558-2fbbc4b933ef", "eventTime": "2019-05-27T23:40:03Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cedb4e9-8ba5-4ed8-a1f5-b73a3fb463ca", "record_id": "flaws_cloudtrail:0000426:5cedb4e9-8ba5-4ed8-a1f5-b73a3fb463ca", "row_index": 426, "timestamp": "2019-05-27T23:40:03Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cedb4e9-8ba5-4ed8-a1f5-b73a3fb463ca", "eventTime": "2019-05-27T23:40:03Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "589798e0-8049-4236-849f-d9aa327cdfa7", "record_id": "flaws_cloudtrail:0000427:589798e0-8049-4236-849f-d9aa327cdfa7", "row_index": 427, "timestamp": "2019-05-27T23:40:03Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "589798e0-8049-4236-849f-d9aa327cdfa7", "eventTime": "2019-05-27T23:40:03Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a219d11-1cf6-4185-a765-4a42b64eed8c", "record_id": "flaws_cloudtrail:0000428:2a219d11-1cf6-4185-a765-4a42b64eed8c", "row_index": 428, "timestamp": "2019-05-27T23:40:03Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a219d11-1cf6-4185-a765-4a42b64eed8c", "eventTime": "2019-05-27T23:40:03Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b125f78c-97fc-42f2-9913-124776bfbd", "record_id": "flaws_cloudtrail:0000429:b125f78c-97fc-42f2-9913-124776bfbd", "row_index": 429, "timestamp": "2019-05-27T23:40:03Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b125f78c-97fc-42f2-9913-124776bfbd", "eventTime": "2019-05-27T23:40:03Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03369a1-546c-413a-a558-2fbbc4b933ef", "record_id": "flaws_cloudtrail:0000430:03369a1-546c-413a-a558-2fbbc4b933ef", "row_index": 430, "timestamp": "2019-05-27T23:40:03Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03369a1-546c-413a-a558-2fbbc4b933ef", "eventTime": "2019-05-27T23:40:03Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cedb4e9-8ba5-4ed8-a1f5-b73a3fb463ca", "record_id": "flaws_cloudtrail:0000431:5cedb4e9-8ba5-4ed8-a1f5-b73a3fb463ca", "row_index": 431, "timestamp": "2019-05-27T23:40:03Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cedb4e9-8ba5-4ed8-a1f5-b73a3fb463ca", "eventTime": "2019-05-27T23:40:03Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95d920306-6d37-44d5-a3b6-c0d8d05654", "record_id": "flaws_cloudtrail:0000432:95d920306-6d37-44d5-a3b6-c0d8d05654", "row_index": 432, "timestamp": "2019-05-27T23:40:04Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95d920306-6d37-44d5-a3b6-c0d8d05654", "eventTime": "2019-05-27T23:40:04Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8a290883-8a1d-4e23-9bad-46cd51549e5d", "record_id": "flaws_cloudtrail:0000433:f8a290883-8a1d-4e23-9bad-46cd51549e5d", "row_index": 433, "timestamp": "2019-05-27T23:40:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8a290883-8a1d-4e23-9bad-46cd51549e5d", "eventTime": "2019-05-27T23:40:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0869c49-5eac-4bdf-9a49-3ba63d0de818", "record_id": "flaws_cloudtrail:0000434:b0869c49-5eac-4bdf-9a49-3ba63d0de818", "row_index": 434, "timestamp": "2019-05-27T23:40:04Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0869c49-5eac-4bdf-9a49-3ba63d0de818", "eventTime": "2019-05-27T23:40:04Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ceb744fd-de64-454b-a5cd-e6a191294520", "record_id": "flaws_cloudtrail:0000435:ceb744fd-de64-454b-a5cd-e6a191294520", "row_index": 435, "timestamp": "2019-05-27T23:40:04Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ceb744fd-de64-454b-a5cd-e6a191294520", "eventTime": "2019-05-27T23:40:04Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95d920306-6d37-44d5-a3b6-c0d8d05654", "record_id": "flaws_cloudtrail:0000436:95d920306-6d37-44d5-a3b6-c0d8d05654", "row_index": 436, "timestamp": "2019-05-27T23:40:04Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95d920306-6d37-44d5-a3b6-c0d8d05654", "eventTime": "2019-05-27T23:40:04Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8a290883-8a1d-4e23-9bad-46cd51549e5d", "record_id": "flaws_cloudtrail:0000437:f8a290883-8a1d-4e23-9bad-46cd51549e5d", "row_index": 437, "timestamp": "2019-05-27T23:40:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8a290883-8a1d-4e23-9bad-46cd51549e5d", "eventTime": "2019-05-27T23:40:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0869c49-5eac-4bdf-9a49-3ba63d0de818", "record_id": "flaws_cloudtrail:0000438:b0869c49-5eac-4bdf-9a49-3ba63d0de818", "row_index": 438, "timestamp": "2019-05-27T23:40:04Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0869c49-5eac-4bdf-9a49-3ba63d0de818", "eventTime": "2019-05-27T23:40:04Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ceb744fd-de64-454b-a5cd-e6a191294520", "record_id": "flaws_cloudtrail:0000439:ceb744fd-de64-454b-a5cd-e6a191294520", "row_index": 439, "timestamp": "2019-05-27T23:40:04Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ceb744fd-de64-454b-a5cd-e6a191294520", "eventTime": "2019-05-27T23:40:04Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd5b7f68-d6b0-470a-88b1-139c85d2337d", "record_id": "flaws_cloudtrail:0000440:fd5b7f68-d6b0-470a-88b1-139c85d2337d", "row_index": 440, "timestamp": "2019-05-27T23:40:05Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd5b7f68-d6b0-470a-88b1-139c85d2337d", "eventTime": "2019-05-27T23:40:05Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e59eb369-92d1-41d6-b08b-429e6befbcab", "record_id": "flaws_cloudtrail:0000441:e59eb369-92d1-41d6-b08b-429e6befbcab", "row_index": 441, "timestamp": "2019-05-27T23:40:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e59eb369-92d1-41d6-b08b-429e6befbcab", "eventTime": "2019-05-27T23:40:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3046b94-8d9c-4879-a56c-215757c2ce10", "record_id": "flaws_cloudtrail:0000442:b3046b94-8d9c-4879-a56c-215757c2ce10", "row_index": 442, "timestamp": "2019-05-27T23:40:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3046b94-8d9c-4879-a56c-215757c2ce10", "eventTime": "2019-05-27T23:40:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8c54064-3543-4d17-8efd-426e95a59915", "record_id": "flaws_cloudtrail:0000443:f8c54064-3543-4d17-8efd-426e95a59915", "row_index": 443, "timestamp": "2019-05-27T23:40:05Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8c54064-3543-4d17-8efd-426e95a59915", "eventTime": "2019-05-27T23:40:05Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd5b7f68-d6b0-470a-88b1-139c85d2337d", "record_id": "flaws_cloudtrail:0000444:fd5b7f68-d6b0-470a-88b1-139c85d2337d", "row_index": 444, "timestamp": "2019-05-27T23:40:05Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd5b7f68-d6b0-470a-88b1-139c85d2337d", "eventTime": "2019-05-27T23:40:05Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e59eb369-92d1-41d6-b08b-429e6befbcab", "record_id": "flaws_cloudtrail:0000445:e59eb369-92d1-41d6-b08b-429e6befbcab", "row_index": 445, "timestamp": "2019-05-27T23:40:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e59eb369-92d1-41d6-b08b-429e6befbcab", "eventTime": "2019-05-27T23:40:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3046b94-8d9c-4879-a56c-215757c2ce10", "record_id": "flaws_cloudtrail:0000446:b3046b94-8d9c-4879-a56c-215757c2ce10", "row_index": 446, "timestamp": "2019-05-27T23:40:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3046b94-8d9c-4879-a56c-215757c2ce10", "eventTime": "2019-05-27T23:40:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8c54064-3543-4d17-8efd-426e95a59915", "record_id": "flaws_cloudtrail:0000447:f8c54064-3543-4d17-8efd-426e95a59915", "row_index": 447, "timestamp": "2019-05-27T23:40:05Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8c54064-3543-4d17-8efd-426e95a59915", "eventTime": "2019-05-27T23:40:05Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d250d789-5cd8-4573-8e42-5a144c09fed6", "record_id": "flaws_cloudtrail:0000448:d250d789-5cd8-4573-8e42-5a144c09fed6", "row_index": 448, "timestamp": "2019-05-27T23:40:06Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d250d789-5cd8-4573-8e42-5a144c09fed6", "eventTime": "2019-05-27T23:40:06Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e27df99f-2edb-4a1c-94e5-80a68d955c0c", "record_id": "flaws_cloudtrail:0000449:e27df99f-2edb-4a1c-94e5-80a68d955c0c", "row_index": 449, "timestamp": "2019-05-27T23:40:06Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e27df99f-2edb-4a1c-94e5-80a68d955c0c", "eventTime": "2019-05-27T23:40:06Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00ed0848-84b3-47b9-8a7a-3c2ec54539e8", "record_id": "flaws_cloudtrail:0000450:00ed0848-84b3-47b9-8a7a-3c2ec54539e8", "row_index": 450, "timestamp": "2019-05-27T23:40:06Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00ed0848-84b3-47b9-8a7a-3c2ec54539e8", "eventTime": "2019-05-27T23:40:06Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7134d41-be42-4c4f-887b-ba9271b29b18", "record_id": "flaws_cloudtrail:0000451:d7134d41-be42-4c4f-887b-ba9271b29b18", "row_index": 451, "timestamp": "2019-05-27T23:40:06Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7134d41-be42-4c4f-887b-ba9271b29b18", "eventTime": "2019-05-27T23:40:06Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a46ef7bb-c6b7-4fca-9cc0-99c94c5c3f93", "record_id": "flaws_cloudtrail:0000452:a46ef7bb-c6b7-4fca-9cc0-99c94c5c3f93", "row_index": 452, "timestamp": "2019-05-27T23:40:06Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a46ef7bb-c6b7-4fca-9cc0-99c94c5c3f93", "eventTime": "2019-05-27T23:40:06Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c2a0623-5825-419c-a930-e6d44944a", "record_id": "flaws_cloudtrail:0000453:7c2a0623-5825-419c-a930-e6d44944a", "row_index": 453, "timestamp": "2019-05-27T23:40:06Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c2a0623-5825-419c-a930-e6d44944a", "eventTime": "2019-05-27T23:40:06Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d250d789-5cd8-4573-8e42-5a144c09fed6", "record_id": "flaws_cloudtrail:0000454:d250d789-5cd8-4573-8e42-5a144c09fed6", "row_index": 454, "timestamp": "2019-05-27T23:40:06Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d250d789-5cd8-4573-8e42-5a144c09fed6", "eventTime": "2019-05-27T23:40:06Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e27df99f-2edb-4a1c-94e5-80a68d955c0c", "record_id": "flaws_cloudtrail:0000455:e27df99f-2edb-4a1c-94e5-80a68d955c0c", "row_index": 455, "timestamp": "2019-05-27T23:40:06Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e27df99f-2edb-4a1c-94e5-80a68d955c0c", "eventTime": "2019-05-27T23:40:06Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00ed0848-84b3-47b9-8a7a-3c2ec54539e8", "record_id": "flaws_cloudtrail:0000456:00ed0848-84b3-47b9-8a7a-3c2ec54539e8", "row_index": 456, "timestamp": "2019-05-27T23:40:06Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00ed0848-84b3-47b9-8a7a-3c2ec54539e8", "eventTime": "2019-05-27T23:40:06Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7134d41-be42-4c4f-887b-ba9271b29b18", "record_id": "flaws_cloudtrail:0000457:d7134d41-be42-4c4f-887b-ba9271b29b18", "row_index": 457, "timestamp": "2019-05-27T23:40:06Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7134d41-be42-4c4f-887b-ba9271b29b18", "eventTime": "2019-05-27T23:40:06Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a46ef7bb-c6b7-4fca-9cc0-99c94c5c3f93", "record_id": "flaws_cloudtrail:0000458:a46ef7bb-c6b7-4fca-9cc0-99c94c5c3f93", "row_index": 458, "timestamp": "2019-05-27T23:40:06Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a46ef7bb-c6b7-4fca-9cc0-99c94c5c3f93", "eventTime": "2019-05-27T23:40:06Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c2a0623-5825-419c-a930-e6d44944a", "record_id": "flaws_cloudtrail:0000459:7c2a0623-5825-419c-a930-e6d44944a", "row_index": 459, "timestamp": "2019-05-27T23:40:06Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c2a0623-5825-419c-a930-e6d44944a", "eventTime": "2019-05-27T23:40:06Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91877a8-3cff-452a-a3ad-227635733cfd", "record_id": "flaws_cloudtrail:0000460:91877a8-3cff-452a-a3ad-227635733cfd", "row_index": 460, "timestamp": "2019-05-27T23:40:07Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91877a8-3cff-452a-a3ad-227635733cfd", "eventTime": "2019-05-27T23:40:07Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cf2dcd9-6a5a-4640-81ba-6010b79b3670", "record_id": "flaws_cloudtrail:0000461:2cf2dcd9-6a5a-4640-81ba-6010b79b3670", "row_index": 461, "timestamp": "2019-05-27T23:40:07Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cf2dcd9-6a5a-4640-81ba-6010b79b3670", "eventTime": "2019-05-27T23:40:07Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5f04cf3-81c8-49a0-888c-dad9f3c4b645", "record_id": "flaws_cloudtrail:0000462:e5f04cf3-81c8-49a0-888c-dad9f3c4b645", "row_index": 462, "timestamp": "2019-05-27T23:40:07Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5f04cf3-81c8-49a0-888c-dad9f3c4b645", "eventTime": "2019-05-27T23:40:07Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91877a8-3cff-452a-a3ad-227635733cfd", "record_id": "flaws_cloudtrail:0000463:91877a8-3cff-452a-a3ad-227635733cfd", "row_index": 463, "timestamp": "2019-05-27T23:40:07Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91877a8-3cff-452a-a3ad-227635733cfd", "eventTime": "2019-05-27T23:40:07Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cf2dcd9-6a5a-4640-81ba-6010b79b3670", "record_id": "flaws_cloudtrail:0000464:2cf2dcd9-6a5a-4640-81ba-6010b79b3670", "row_index": 464, "timestamp": "2019-05-27T23:40:07Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cf2dcd9-6a5a-4640-81ba-6010b79b3670", "eventTime": "2019-05-27T23:40:07Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5f04cf3-81c8-49a0-888c-dad9f3c4b645", "record_id": "flaws_cloudtrail:0000465:e5f04cf3-81c8-49a0-888c-dad9f3c4b645", "row_index": 465, "timestamp": "2019-05-27T23:40:07Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5f04cf3-81c8-49a0-888c-dad9f3c4b645", "eventTime": "2019-05-27T23:40:07Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59cf8710-46a6-4b71-88ab-a7834ed882c5", "record_id": "flaws_cloudtrail:0000466:59cf8710-46a6-4b71-88ab-a7834ed882c5", "row_index": 466, "timestamp": "2019-05-27T23:40:08Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59cf8710-46a6-4b71-88ab-a7834ed882c5", "eventTime": "2019-05-27T23:40:08Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a01360c-b199-4c83-8735-f069236f2a3", "record_id": "flaws_cloudtrail:0000467:a01360c-b199-4c83-8735-f069236f2a3", "row_index": 467, "timestamp": "2019-05-27T23:40:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a01360c-b199-4c83-8735-f069236f2a3", "eventTime": "2019-05-27T23:40:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6aac46b-5358-4179-8650-f8800f54f578", "record_id": "flaws_cloudtrail:0000468:d6aac46b-5358-4179-8650-f8800f54f578", "row_index": 468, "timestamp": "2019-05-27T23:40:08Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6aac46b-5358-4179-8650-f8800f54f578", "eventTime": "2019-05-27T23:40:08Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28504b1b-2083-45f7-b71e-152a578286ed", "record_id": "flaws_cloudtrail:0000469:28504b1b-2083-45f7-b71e-152a578286ed", "row_index": 469, "timestamp": "2019-05-27T23:40:08Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28504b1b-2083-45f7-b71e-152a578286ed", "eventTime": "2019-05-27T23:40:08Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "714f519b-b7ae-49d2-b399-44cffdecb656", "record_id": "flaws_cloudtrail:0000470:714f519b-b7ae-49d2-b399-44cffdecb656", "row_index": 470, "timestamp": "2019-05-27T23:40:08Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "714f519b-b7ae-49d2-b399-44cffdecb656", "eventTime": "2019-05-27T23:40:08Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59cf8710-46a6-4b71-88ab-a7834ed882c5", "record_id": "flaws_cloudtrail:0000471:59cf8710-46a6-4b71-88ab-a7834ed882c5", "row_index": 471, "timestamp": "2019-05-27T23:40:08Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59cf8710-46a6-4b71-88ab-a7834ed882c5", "eventTime": "2019-05-27T23:40:08Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a01360c-b199-4c83-8735-f069236f2a3", "record_id": "flaws_cloudtrail:0000472:a01360c-b199-4c83-8735-f069236f2a3", "row_index": 472, "timestamp": "2019-05-27T23:40:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a01360c-b199-4c83-8735-f069236f2a3", "eventTime": "2019-05-27T23:40:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6aac46b-5358-4179-8650-f8800f54f578", "record_id": "flaws_cloudtrail:0000473:d6aac46b-5358-4179-8650-f8800f54f578", "row_index": 473, "timestamp": "2019-05-27T23:40:08Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6aac46b-5358-4179-8650-f8800f54f578", "eventTime": "2019-05-27T23:40:08Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28504b1b-2083-45f7-b71e-152a578286ed", "record_id": "flaws_cloudtrail:0000474:28504b1b-2083-45f7-b71e-152a578286ed", "row_index": 474, "timestamp": "2019-05-27T23:40:08Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28504b1b-2083-45f7-b71e-152a578286ed", "eventTime": "2019-05-27T23:40:08Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "714f519b-b7ae-49d2-b399-44cffdecb656", "record_id": "flaws_cloudtrail:0000475:714f519b-b7ae-49d2-b399-44cffdecb656", "row_index": 475, "timestamp": "2019-05-27T23:40:08Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "714f519b-b7ae-49d2-b399-44cffdecb656", "eventTime": "2019-05-27T23:40:08Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a6510c9-f2c4-40ac-9a1d-b35b523f21ca", "record_id": "flaws_cloudtrail:0000476:3a6510c9-f2c4-40ac-9a1d-b35b523f21ca", "row_index": 476, "timestamp": "2019-05-27T23:40:09Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a6510c9-f2c4-40ac-9a1d-b35b523f21ca", "eventTime": "2019-05-27T23:40:09Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46a81b7b-52b4-444e-8239-98cb47dcb044", "record_id": "flaws_cloudtrail:0000477:46a81b7b-52b4-444e-8239-98cb47dcb044", "row_index": 477, "timestamp": "2019-05-27T23:40:09Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46a81b7b-52b4-444e-8239-98cb47dcb044", "eventTime": "2019-05-27T23:40:09Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e736a1f0-c132-4ffe-b159-18288af30082", "record_id": "flaws_cloudtrail:0000478:e736a1f0-c132-4ffe-b159-18288af30082", "row_index": 478, "timestamp": "2019-05-27T23:40:09Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e736a1f0-c132-4ffe-b159-18288af30082", "eventTime": "2019-05-27T23:40:09Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa48a233-8fd8-496c-9f8e-58275cb98ce0", "record_id": "flaws_cloudtrail:0000479:fa48a233-8fd8-496c-9f8e-58275cb98ce0", "row_index": 479, "timestamp": "2019-05-27T23:40:09Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa48a233-8fd8-496c-9f8e-58275cb98ce0", "eventTime": "2019-05-27T23:40:09Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89cae49a-e69a-4d5b-ac8b-41a99ef6bf0d", "record_id": "flaws_cloudtrail:0000480:89cae49a-e69a-4d5b-ac8b-41a99ef6bf0d", "row_index": 480, "timestamp": "2019-05-27T23:40:09Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89cae49a-e69a-4d5b-ac8b-41a99ef6bf0d", "eventTime": "2019-05-27T23:40:09Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a6510c9-f2c4-40ac-9a1d-b35b523f21ca", "record_id": "flaws_cloudtrail:0000481:3a6510c9-f2c4-40ac-9a1d-b35b523f21ca", "row_index": 481, "timestamp": "2019-05-27T23:40:09Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a6510c9-f2c4-40ac-9a1d-b35b523f21ca", "eventTime": "2019-05-27T23:40:09Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46a81b7b-52b4-444e-8239-98cb47dcb044", "record_id": "flaws_cloudtrail:0000482:46a81b7b-52b4-444e-8239-98cb47dcb044", "row_index": 482, "timestamp": "2019-05-27T23:40:09Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46a81b7b-52b4-444e-8239-98cb47dcb044", "eventTime": "2019-05-27T23:40:09Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e736a1f0-c132-4ffe-b159-18288af30082", "record_id": "flaws_cloudtrail:0000483:e736a1f0-c132-4ffe-b159-18288af30082", "row_index": 483, "timestamp": "2019-05-27T23:40:09Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e736a1f0-c132-4ffe-b159-18288af30082", "eventTime": "2019-05-27T23:40:09Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa48a233-8fd8-496c-9f8e-58275cb98ce0", "record_id": "flaws_cloudtrail:0000484:fa48a233-8fd8-496c-9f8e-58275cb98ce0", "row_index": 484, "timestamp": "2019-05-27T23:40:09Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa48a233-8fd8-496c-9f8e-58275cb98ce0", "eventTime": "2019-05-27T23:40:09Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89cae49a-e69a-4d5b-ac8b-41a99ef6bf0d", "record_id": "flaws_cloudtrail:0000485:89cae49a-e69a-4d5b-ac8b-41a99ef6bf0d", "row_index": 485, "timestamp": "2019-05-27T23:40:09Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89cae49a-e69a-4d5b-ac8b-41a99ef6bf0d", "eventTime": "2019-05-27T23:40:09Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22b211a8-62db-4b41-80c3-4436ac0461a6", "record_id": "flaws_cloudtrail:0000486:22b211a8-62db-4b41-80c3-4436ac0461a6", "row_index": 486, "timestamp": "2019-05-27T23:40:10Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22b211a8-62db-4b41-80c3-4436ac0461a6", "eventTime": "2019-05-27T23:40:10Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2b118a8-5468-43d4-8139-97712d2db7b", "record_id": "flaws_cloudtrail:0000487:b2b118a8-5468-43d4-8139-97712d2db7b", "row_index": 487, "timestamp": "2019-05-27T23:40:10Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2b118a8-5468-43d4-8139-97712d2db7b", "eventTime": "2019-05-27T23:40:10Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "571c8a70-f94a-4095-9f2d-75c083abe256", "record_id": "flaws_cloudtrail:0000488:571c8a70-f94a-4095-9f2d-75c083abe256", "row_index": 488, "timestamp": "2019-05-27T23:40:10Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "571c8a70-f94a-4095-9f2d-75c083abe256", "eventTime": "2019-05-27T23:40:10Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7bfeea4-1a34-47ff-98fd-63e8e0c94d54", "record_id": "flaws_cloudtrail:0000489:a7bfeea4-1a34-47ff-98fd-63e8e0c94d54", "row_index": 489, "timestamp": "2019-05-27T23:40:10Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7bfeea4-1a34-47ff-98fd-63e8e0c94d54", "eventTime": "2019-05-27T23:40:10Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22b211a8-62db-4b41-80c3-4436ac0461a6", "record_id": "flaws_cloudtrail:0000490:22b211a8-62db-4b41-80c3-4436ac0461a6", "row_index": 490, "timestamp": "2019-05-27T23:40:10Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22b211a8-62db-4b41-80c3-4436ac0461a6", "eventTime": "2019-05-27T23:40:10Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2b118a8-5468-43d4-8139-97712d2db7b", "record_id": "flaws_cloudtrail:0000491:b2b118a8-5468-43d4-8139-97712d2db7b", "row_index": 491, "timestamp": "2019-05-27T23:40:10Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2b118a8-5468-43d4-8139-97712d2db7b", "eventTime": "2019-05-27T23:40:10Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "571c8a70-f94a-4095-9f2d-75c083abe256", "record_id": "flaws_cloudtrail:0000492:571c8a70-f94a-4095-9f2d-75c083abe256", "row_index": 492, "timestamp": "2019-05-27T23:40:10Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "571c8a70-f94a-4095-9f2d-75c083abe256", "eventTime": "2019-05-27T23:40:10Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7bfeea4-1a34-47ff-98fd-63e8e0c94d54", "record_id": "flaws_cloudtrail:0000493:a7bfeea4-1a34-47ff-98fd-63e8e0c94d54", "row_index": 493, "timestamp": "2019-05-27T23:40:10Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7bfeea4-1a34-47ff-98fd-63e8e0c94d54", "eventTime": "2019-05-27T23:40:10Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f05bb914-0421-45c5-bbcd-02f4224aa86a", "record_id": "flaws_cloudtrail:0000494:f05bb914-0421-45c5-bbcd-02f4224aa86a", "row_index": 494, "timestamp": "2019-05-27T23:40:11Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f05bb914-0421-45c5-bbcd-02f4224aa86a", "eventTime": "2019-05-27T23:40:11Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "844806c-9289-4d00-ae22-dc43ddf556312", "record_id": "flaws_cloudtrail:0000495:844806c-9289-4d00-ae22-dc43ddf556312", "row_index": 495, "timestamp": "2019-05-27T23:40:11Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "844806c-9289-4d00-ae22-dc43ddf556312", "eventTime": "2019-05-27T23:40:11Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "396c39ca-164f-4e6d-8999-353a2d2d8bca", "record_id": "flaws_cloudtrail:0000496:396c39ca-164f-4e6d-8999-353a2d2d8bca", "row_index": 496, "timestamp": "2019-05-27T23:40:11Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "396c39ca-164f-4e6d-8999-353a2d2d8bca", "eventTime": "2019-05-27T23:40:11Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1810ba22-285f-4565-9721-69e64173", "record_id": "flaws_cloudtrail:0000497:1810ba22-285f-4565-9721-69e64173", "row_index": 497, "timestamp": "2019-05-27T23:40:11Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1810ba22-285f-4565-9721-69e64173", "eventTime": "2019-05-27T23:40:11Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "374018-df98-4a13-b0c3-3e384dd6de1f", "record_id": "flaws_cloudtrail:0000498:374018-df98-4a13-b0c3-3e384dd6de1f", "row_index": 498, "timestamp": "2019-05-27T23:40:11Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "374018-df98-4a13-b0c3-3e384dd6de1f", "eventTime": "2019-05-27T23:40:11Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f05bb914-0421-45c5-bbcd-02f4224aa86a", "record_id": "flaws_cloudtrail:0000499:f05bb914-0421-45c5-bbcd-02f4224aa86a", "row_index": 499, "timestamp": "2019-05-27T23:40:11Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f05bb914-0421-45c5-bbcd-02f4224aa86a", "eventTime": "2019-05-27T23:40:11Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "844806c-9289-4d00-ae22-dc43ddf556312", "record_id": "flaws_cloudtrail:0000500:844806c-9289-4d00-ae22-dc43ddf556312", "row_index": 500, "timestamp": "2019-05-27T23:40:11Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "844806c-9289-4d00-ae22-dc43ddf556312", "eventTime": "2019-05-27T23:40:11Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "396c39ca-164f-4e6d-8999-353a2d2d8bca", "record_id": "flaws_cloudtrail:0000501:396c39ca-164f-4e6d-8999-353a2d2d8bca", "row_index": 501, "timestamp": "2019-05-27T23:40:11Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "396c39ca-164f-4e6d-8999-353a2d2d8bca", "eventTime": "2019-05-27T23:40:11Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1810ba22-285f-4565-9721-69e64173", "record_id": "flaws_cloudtrail:0000502:1810ba22-285f-4565-9721-69e64173", "row_index": 502, "timestamp": "2019-05-27T23:40:11Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1810ba22-285f-4565-9721-69e64173", "eventTime": "2019-05-27T23:40:11Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "374018-df98-4a13-b0c3-3e384dd6de1f", "record_id": "flaws_cloudtrail:0000503:374018-df98-4a13-b0c3-3e384dd6de1f", "row_index": 503, "timestamp": "2019-05-27T23:40:11Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "374018-df98-4a13-b0c3-3e384dd6de1f", "eventTime": "2019-05-27T23:40:11Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42e7cd06-6020-4081-b585-06fa7f38d469", "record_id": "flaws_cloudtrail:0000504:42e7cd06-6020-4081-b585-06fa7f38d469", "row_index": 504, "timestamp": "2019-05-27T23:40:12Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42e7cd06-6020-4081-b585-06fa7f38d469", "eventTime": "2019-05-27T23:40:12Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02133bad-02f3-4ba8-aa44-dcd21f4f040c", "record_id": "flaws_cloudtrail:0000505:02133bad-02f3-4ba8-aa44-dcd21f4f040c", "row_index": 505, "timestamp": "2019-05-27T23:40:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02133bad-02f3-4ba8-aa44-dcd21f4f040c", "eventTime": "2019-05-27T23:40:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e685d199-894d-4992-ab32-41ab7b0013af", "record_id": "flaws_cloudtrail:0000506:e685d199-894d-4992-ab32-41ab7b0013af", "row_index": 506, "timestamp": "2019-05-27T23:40:12Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e685d199-894d-4992-ab32-41ab7b0013af", "eventTime": "2019-05-27T23:40:12Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac93d338-89c8-4756-b9ff-a60b59211994", "record_id": "flaws_cloudtrail:0000507:ac93d338-89c8-4756-b9ff-a60b59211994", "row_index": 507, "timestamp": "2019-05-27T23:40:12Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac93d338-89c8-4756-b9ff-a60b59211994", "eventTime": "2019-05-27T23:40:12Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a39e1de-006a-42a4-a885-5f5f8e2fe4ab", "record_id": "flaws_cloudtrail:0000508:6a39e1de-006a-42a4-a885-5f5f8e2fe4ab", "row_index": 508, "timestamp": "2019-05-27T23:40:12Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a39e1de-006a-42a4-a885-5f5f8e2fe4ab", "eventTime": "2019-05-27T23:40:12Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42e7cd06-6020-4081-b585-06fa7f38d469", "record_id": "flaws_cloudtrail:0000509:42e7cd06-6020-4081-b585-06fa7f38d469", "row_index": 509, "timestamp": "2019-05-27T23:40:12Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42e7cd06-6020-4081-b585-06fa7f38d469", "eventTime": "2019-05-27T23:40:12Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02133bad-02f3-4ba8-aa44-dcd21f4f040c", "record_id": "flaws_cloudtrail:0000510:02133bad-02f3-4ba8-aa44-dcd21f4f040c", "row_index": 510, "timestamp": "2019-05-27T23:40:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02133bad-02f3-4ba8-aa44-dcd21f4f040c", "eventTime": "2019-05-27T23:40:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e685d199-894d-4992-ab32-41ab7b0013af", "record_id": "flaws_cloudtrail:0000511:e685d199-894d-4992-ab32-41ab7b0013af", "row_index": 511, "timestamp": "2019-05-27T23:40:12Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e685d199-894d-4992-ab32-41ab7b0013af", "eventTime": "2019-05-27T23:40:12Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac93d338-89c8-4756-b9ff-a60b59211994", "record_id": "flaws_cloudtrail:0000512:ac93d338-89c8-4756-b9ff-a60b59211994", "row_index": 512, "timestamp": "2019-05-27T23:40:12Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac93d338-89c8-4756-b9ff-a60b59211994", "eventTime": "2019-05-27T23:40:12Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a39e1de-006a-42a4-a885-5f5f8e2fe4ab", "record_id": "flaws_cloudtrail:0000513:6a39e1de-006a-42a4-a885-5f5f8e2fe4ab", "row_index": 513, "timestamp": "2019-05-27T23:40:12Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a39e1de-006a-42a4-a885-5f5f8e2fe4ab", "eventTime": "2019-05-27T23:40:12Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eaf134de-0e4a-4c75-95ea-f1b61362237d", "record_id": "flaws_cloudtrail:0000514:eaf134de-0e4a-4c75-95ea-f1b61362237d", "row_index": 514, "timestamp": "2019-05-27T23:40:13Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eaf134de-0e4a-4c75-95ea-f1b61362237d", "eventTime": "2019-05-27T23:40:13Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "058b7b96-d066-4383-a0a7-e184181eb517", "record_id": "flaws_cloudtrail:0000515:058b7b96-d066-4383-a0a7-e184181eb517", "row_index": 515, "timestamp": "2019-05-27T23:40:13Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "058b7b96-d066-4383-a0a7-e184181eb517", "eventTime": "2019-05-27T23:40:13Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eaf134de-0e4a-4c75-95ea-f1b61362237d", "record_id": "flaws_cloudtrail:0000516:eaf134de-0e4a-4c75-95ea-f1b61362237d", "row_index": 516, "timestamp": "2019-05-27T23:40:13Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eaf134de-0e4a-4c75-95ea-f1b61362237d", "eventTime": "2019-05-27T23:40:13Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "058b7b96-d066-4383-a0a7-e184181eb517", "record_id": "flaws_cloudtrail:0000517:058b7b96-d066-4383-a0a7-e184181eb517", "row_index": 517, "timestamp": "2019-05-27T23:40:13Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "058b7b96-d066-4383-a0a7-e184181eb517", "eventTime": "2019-05-27T23:40:13Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6b4223d-f979-4903-b105-09172b1eb6", "record_id": "flaws_cloudtrail:0000518:c6b4223d-f979-4903-b105-09172b1eb6", "row_index": 518, "timestamp": "2019-05-27T23:40:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6b4223d-f979-4903-b105-09172b1eb6", "eventTime": "2019-05-27T23:40:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34e13c35-8cfa-417f-90d6-d9f3cae7dddb", "record_id": "flaws_cloudtrail:0000519:34e13c35-8cfa-417f-90d6-d9f3cae7dddb", "row_index": 519, "timestamp": "2019-05-27T23:40:14Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34e13c35-8cfa-417f-90d6-d9f3cae7dddb", "eventTime": "2019-05-27T23:40:14Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22fd672f-26ea-4c0c-b56f-388ea62a3bb2", "record_id": "flaws_cloudtrail:0000520:22fd672f-26ea-4c0c-b56f-388ea62a3bb2", "row_index": 520, "timestamp": "2019-05-27T23:40:14Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22fd672f-26ea-4c0c-b56f-388ea62a3bb2", "eventTime": "2019-05-27T23:40:14Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6b4223d-f979-4903-b105-09172b1eb6", "record_id": "flaws_cloudtrail:0000521:c6b4223d-f979-4903-b105-09172b1eb6", "row_index": 521, "timestamp": "2019-05-27T23:40:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6b4223d-f979-4903-b105-09172b1eb6", "eventTime": "2019-05-27T23:40:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34e13c35-8cfa-417f-90d6-d9f3cae7dddb", "record_id": "flaws_cloudtrail:0000522:34e13c35-8cfa-417f-90d6-d9f3cae7dddb", "row_index": 522, "timestamp": "2019-05-27T23:40:14Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34e13c35-8cfa-417f-90d6-d9f3cae7dddb", "eventTime": "2019-05-27T23:40:14Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22fd672f-26ea-4c0c-b56f-388ea62a3bb2", "record_id": "flaws_cloudtrail:0000523:22fd672f-26ea-4c0c-b56f-388ea62a3bb2", "row_index": 523, "timestamp": "2019-05-27T23:40:14Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22fd672f-26ea-4c0c-b56f-388ea62a3bb2", "eventTime": "2019-05-27T23:40:14Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6ab887b-bf7b-483d-b7f4-a89db324412c7", "record_id": "flaws_cloudtrail:0000524:c6ab887b-bf7b-483d-b7f4-a89db324412c7", "row_index": 524, "timestamp": "2019-05-27T23:40:15Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6ab887b-bf7b-483d-b7f4-a89db324412c7", "eventTime": "2019-05-27T23:40:15Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19e5d6b5-d7fc-4f83-b635-86f4df5ed4c8", "record_id": "flaws_cloudtrail:0000525:19e5d6b5-d7fc-4f83-b635-86f4df5ed4c8", "row_index": 525, "timestamp": "2019-05-27T23:40:15Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19e5d6b5-d7fc-4f83-b635-86f4df5ed4c8", "eventTime": "2019-05-27T23:40:15Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "214942e40-a4a0-4f7f-8f6f-57484167660b", "record_id": "flaws_cloudtrail:0000526:214942e40-a4a0-4f7f-8f6f-57484167660b", "row_index": 526, "timestamp": "2019-05-27T23:40:15Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "214942e40-a4a0-4f7f-8f6f-57484167660b", "eventTime": "2019-05-27T23:40:15Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9261db27-0a30-41cc-a74c-1420c368050b", "record_id": "flaws_cloudtrail:0000527:9261db27-0a30-41cc-a74c-1420c368050b", "row_index": 527, "timestamp": "2019-05-27T23:40:15Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9261db27-0a30-41cc-a74c-1420c368050b", "eventTime": "2019-05-27T23:40:15Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6ab887b-bf7b-483d-b7f4-a89db324412c7", "record_id": "flaws_cloudtrail:0000528:c6ab887b-bf7b-483d-b7f4-a89db324412c7", "row_index": 528, "timestamp": "2019-05-27T23:40:15Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6ab887b-bf7b-483d-b7f4-a89db324412c7", "eventTime": "2019-05-27T23:40:15Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19e5d6b5-d7fc-4f83-b635-86f4df5ed4c8", "record_id": "flaws_cloudtrail:0000529:19e5d6b5-d7fc-4f83-b635-86f4df5ed4c8", "row_index": 529, "timestamp": "2019-05-27T23:40:15Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19e5d6b5-d7fc-4f83-b635-86f4df5ed4c8", "eventTime": "2019-05-27T23:40:15Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "214942e40-a4a0-4f7f-8f6f-57484167660b", "record_id": "flaws_cloudtrail:0000530:214942e40-a4a0-4f7f-8f6f-57484167660b", "row_index": 530, "timestamp": "2019-05-27T23:40:15Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "214942e40-a4a0-4f7f-8f6f-57484167660b", "eventTime": "2019-05-27T23:40:15Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9261db27-0a30-41cc-a74c-1420c368050b", "record_id": "flaws_cloudtrail:0000531:9261db27-0a30-41cc-a74c-1420c368050b", "row_index": 531, "timestamp": "2019-05-27T23:40:15Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "[aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9261db27-0a30-41cc-a74c-1420c368050b", "eventTime": "2019-05-27T23:40:15Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "[aws-cli/1.16.140 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9868ab35-2b00-4b59-994b-2e955e1df678", "record_id": "flaws_cloudtrail:0000532:9868ab35-2b00-4b59-994b-2e955e1df678", "row_index": 532, "timestamp": "2019-05-27T23:40:16Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9868ab35-2b00-4b59-994b-2e955e1df678", "eventTime": "2019-05-27T23:40:16Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d436038-7206-402a-878c-8feaa10aad6d", "record_id": "flaws_cloudtrail:0000533:d436038-7206-402a-878c-8feaa10aad6d", "row_index": 533, "timestamp": "2019-05-27T23:40:16Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d436038-7206-402a-878c-8feaa10aad6d", "eventTime": "2019-05-27T23:40:16Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e574cd4b-ffa3-45d6-894d-e25b98ea53d4", "record_id": "flaws_cloudtrail:0000534:e574cd4b-ffa3-45d6-894d-e25b98ea53d4", "row_index": 534, "timestamp": "2019-05-27T23:40:16Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e574cd4b-ffa3-45d6-894d-e25b98ea53d4", "eventTime": "2019-05-27T23:40:16Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbe847a7-152a-4252-886e-fcf03f1f1bb5", "record_id": "flaws_cloudtrail:0000535:dbe847a7-152a-4252-886e-fcf03f1f1bb5", "row_index": 535, "timestamp": "2019-05-27T23:40:16Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbe847a7-152a-4252-886e-fcf03f1f1bb5", "eventTime": "2019-05-27T23:40:16Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9868ab35-2b00-4b59-994b-2e955e1df678", "record_id": "flaws_cloudtrail:0000536:9868ab35-2b00-4b59-994b-2e955e1df678", "row_index": 536, "timestamp": "2019-05-27T23:40:16Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9868ab35-2b00-4b59-994b-2e955e1df678", "eventTime": "2019-05-27T23:40:16Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d436038-7206-402a-878c-8feaa10aad6d", "record_id": "flaws_cloudtrail:0000537:d436038-7206-402a-878c-8feaa10aad6d", "row_index": 537, "timestamp": "2019-05-27T23:40:16Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d436038-7206-402a-878c-8feaa10aad6d", "eventTime": "2019-05-27T23:40:16Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e574cd4b-ffa3-45d6-894d-e25b98ea53d4", "record_id": "flaws_cloudtrail:0000538:e574cd4b-ffa3-45d6-894d-e25b98ea53d4", "row_index": 538, "timestamp": "2019-05-27T23:40:16Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e574cd4b-ffa3-45d6-894d-e25b98ea53d4", "eventTime": "2019-05-27T23:40:16Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbe847a7-152a-4252-886e-fcf03f1f1bb5", "record_id": "flaws_cloudtrail:0000539:dbe847a7-152a-4252-886e-fcf03f1f1bb5", "row_index": 539, "timestamp": "2019-05-27T23:40:16Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbe847a7-152a-4252-886e-fcf03f1f1bb5", "eventTime": "2019-05-27T23:40:16Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddc1d4da-5109-49f9-861c-47cc7eb5b59f", "record_id": "flaws_cloudtrail:0000540:ddc1d4da-5109-49f9-861c-47cc7eb5b59f", "row_index": 540, "timestamp": "2019-05-27T23:40:17Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddc1d4da-5109-49f9-861c-47cc7eb5b59f", "eventTime": "2019-05-27T23:40:17Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "687381b-eaa8-49da-ae1c-e3034c7ea8da", "record_id": "flaws_cloudtrail:0000541:687381b-eaa8-49da-ae1c-e3034c7ea8da", "row_index": 541, "timestamp": "2019-05-27T23:40:17Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "687381b-eaa8-49da-ae1c-e3034c7ea8da", "eventTime": "2019-05-27T23:40:17Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22522d98-658e-43c3-80d7-fdc40275aa68", "record_id": "flaws_cloudtrail:0000542:22522d98-658e-43c3-80d7-fdc40275aa68", "row_index": 542, "timestamp": "2019-05-27T23:40:17Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22522d98-658e-43c3-80d7-fdc40275aa68", "eventTime": "2019-05-27T23:40:17Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddc1d4da-5109-49f9-861c-47cc7eb5b59f", "record_id": "flaws_cloudtrail:0000543:ddc1d4da-5109-49f9-861c-47cc7eb5b59f", "row_index": 543, "timestamp": "2019-05-27T23:40:17Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddc1d4da-5109-49f9-861c-47cc7eb5b59f", "eventTime": "2019-05-27T23:40:17Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "687381b-eaa8-49da-ae1c-e3034c7ea8da", "record_id": "flaws_cloudtrail:0000544:687381b-eaa8-49da-ae1c-e3034c7ea8da", "row_index": 544, "timestamp": "2019-05-27T23:40:17Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "687381b-eaa8-49da-ae1c-e3034c7ea8da", "eventTime": "2019-05-27T23:40:17Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22522d98-658e-43c3-80d7-fdc40275aa68", "record_id": "flaws_cloudtrail:0000545:22522d98-658e-43c3-80d7-fdc40275aa68", "row_index": 545, "timestamp": "2019-05-27T23:40:17Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22522d98-658e-43c3-80d7-fdc40275aa68", "eventTime": "2019-05-27T23:40:17Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "238693c38-ab99-4b0f-b13c-d40163a4cfa1", "record_id": "flaws_cloudtrail:0000546:238693c38-ab99-4b0f-b13c-d40163a4cfa1", "row_index": 546, "timestamp": "2019-05-27T23:40:18Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "238693c38-ab99-4b0f-b13c-d40163a4cfa1", "eventTime": "2019-05-27T23:40:18Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cf3bde0-b127-4fa1-bbdd-ea08a4fa1c3d", "record_id": "flaws_cloudtrail:0000547:1cf3bde0-b127-4fa1-bbdd-ea08a4fa1c3d", "row_index": 547, "timestamp": "2019-05-27T23:40:18Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cf3bde0-b127-4fa1-bbdd-ea08a4fa1c3d", "eventTime": "2019-05-27T23:40:18Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0503f77f-967a-4b59-9594-bf96d90935", "record_id": "flaws_cloudtrail:0000548:0503f77f-967a-4b59-9594-bf96d90935", "row_index": 548, "timestamp": "2019-05-27T23:40:18Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0503f77f-967a-4b59-9594-bf96d90935", "eventTime": "2019-05-27T23:40:18Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2309ac95-bffb-4cff-a860-f8b6cd7d1cd2", "record_id": "flaws_cloudtrail:0000549:2309ac95-bffb-4cff-a860-f8b6cd7d1cd2", "row_index": 549, "timestamp": "2019-05-27T23:40:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2309ac95-bffb-4cff-a860-f8b6cd7d1cd2", "eventTime": "2019-05-27T23:40:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34d655155-3eef-4f01-8e64-ac397e788cf1", "record_id": "flaws_cloudtrail:0000550:34d655155-3eef-4f01-8e64-ac397e788cf1", "row_index": 550, "timestamp": "2019-05-27T23:40:18Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34d655155-3eef-4f01-8e64-ac397e788cf1", "eventTime": "2019-05-27T23:40:18Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee629b62-b78c-4105-b60c-87deb983f7a1", "record_id": "flaws_cloudtrail:0000551:ee629b62-b78c-4105-b60c-87deb983f7a1", "row_index": 551, "timestamp": "2019-05-27T23:40:18Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee629b62-b78c-4105-b60c-87deb983f7a1", "eventTime": "2019-05-27T23:40:18Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fecda1eb-8624-4b61-b758-40a14beac5a3", "record_id": "flaws_cloudtrail:0000552:fecda1eb-8624-4b61-b758-40a14beac5a3", "row_index": 552, "timestamp": "2019-05-27T23:40:18Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fecda1eb-8624-4b61-b758-40a14beac5a3", "eventTime": "2019-05-27T23:40:18Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "238693c38-ab99-4b0f-b13c-d40163a4cfa1", "record_id": "flaws_cloudtrail:0000553:238693c38-ab99-4b0f-b13c-d40163a4cfa1", "row_index": 553, "timestamp": "2019-05-27T23:40:18Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "238693c38-ab99-4b0f-b13c-d40163a4cfa1", "eventTime": "2019-05-27T23:40:18Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cf3bde0-b127-4fa1-bbdd-ea08a4fa1c3d", "record_id": "flaws_cloudtrail:0000554:1cf3bde0-b127-4fa1-bbdd-ea08a4fa1c3d", "row_index": 554, "timestamp": "2019-05-27T23:40:18Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cf3bde0-b127-4fa1-bbdd-ea08a4fa1c3d", "eventTime": "2019-05-27T23:40:18Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0503f77f-967a-4b59-9594-bf96d90935", "record_id": "flaws_cloudtrail:0000555:0503f77f-967a-4b59-9594-bf96d90935", "row_index": 555, "timestamp": "2019-05-27T23:40:18Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0503f77f-967a-4b59-9594-bf96d90935", "eventTime": "2019-05-27T23:40:18Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2309ac95-bffb-4cff-a860-f8b6cd7d1cd2", "record_id": "flaws_cloudtrail:0000556:2309ac95-bffb-4cff-a860-f8b6cd7d1cd2", "row_index": 556, "timestamp": "2019-05-27T23:40:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2309ac95-bffb-4cff-a860-f8b6cd7d1cd2", "eventTime": "2019-05-27T23:40:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34d655155-3eef-4f01-8e64-ac397e788cf1", "record_id": "flaws_cloudtrail:0000557:34d655155-3eef-4f01-8e64-ac397e788cf1", "row_index": 557, "timestamp": "2019-05-27T23:40:18Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34d655155-3eef-4f01-8e64-ac397e788cf1", "eventTime": "2019-05-27T23:40:18Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee629b62-b78c-4105-b60c-87deb983f7a1", "record_id": "flaws_cloudtrail:0000558:ee629b62-b78c-4105-b60c-87deb983f7a1", "row_index": 558, "timestamp": "2019-05-27T23:40:18Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee629b62-b78c-4105-b60c-87deb983f7a1", "eventTime": "2019-05-27T23:40:18Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fecda1eb-8624-4b61-b758-40a14beac5a3", "record_id": "flaws_cloudtrail:0000559:fecda1eb-8624-4b61-b758-40a14beac5a3", "row_index": 559, "timestamp": "2019-05-27T23:40:18Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fecda1eb-8624-4b61-b758-40a14beac5a3", "eventTime": "2019-05-27T23:40:18Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15aea96d-45e2-4f02-9aa1-f78eb1a69e35", "record_id": "flaws_cloudtrail:0000560:15aea96d-45e2-4f02-9aa1-f78eb1a69e35", "row_index": 560, "timestamp": "2019-05-27T23:40:19Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15aea96d-45e2-4f02-9aa1-f78eb1a69e35", "eventTime": "2019-05-27T23:40:19Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae41cab4-c78d-4f61-a615-841de902a5ac", "record_id": "flaws_cloudtrail:0000561:ae41cab4-c78d-4f61-a615-841de902a5ac", "row_index": 561, "timestamp": "2019-05-27T23:40:19Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae41cab4-c78d-4f61-a615-841de902a5ac", "eventTime": "2019-05-27T23:40:19Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f09956-1f45-4443-aa12-dbb202e7ca74", "record_id": "flaws_cloudtrail:0000562:7f09956-1f45-4443-aa12-dbb202e7ca74", "row_index": 562, "timestamp": "2019-05-27T23:40:19Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f09956-1f45-4443-aa12-dbb202e7ca74", "eventTime": "2019-05-27T23:40:19Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d17f9991-1850-48c1-8750-a09c5d081d66", "record_id": "flaws_cloudtrail:0000563:d17f9991-1850-48c1-8750-a09c5d081d66", "row_index": 563, "timestamp": "2019-05-27T23:40:19Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d17f9991-1850-48c1-8750-a09c5d081d66", "eventTime": "2019-05-27T23:40:19Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ec2dd8a-a7c7-4855-b50e-5573c9ee44f3", "record_id": "flaws_cloudtrail:0000564:0ec2dd8a-a7c7-4855-b50e-5573c9ee44f3", "row_index": 564, "timestamp": "2019-05-27T23:40:19Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ec2dd8a-a7c7-4855-b50e-5573c9ee44f3", "eventTime": "2019-05-27T23:40:19Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9542dbb-8ee5-414d-8416-502b4e51f174", "record_id": "flaws_cloudtrail:0000565:c9542dbb-8ee5-414d-8416-502b4e51f174", "row_index": 565, "timestamp": "2019-05-27T23:40:19Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9542dbb-8ee5-414d-8416-502b4e51f174", "eventTime": "2019-05-27T23:40:19Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cd31656-887a-4669-8276-6be2b1e568482", "record_id": "flaws_cloudtrail:0000566:1cd31656-887a-4669-8276-6be2b1e568482", "row_index": 566, "timestamp": "2019-05-27T23:40:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cd31656-887a-4669-8276-6be2b1e568482", "eventTime": "2019-05-27T23:40:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15aea96d-45e2-4f02-9aa1-f78eb1a69e35", "record_id": "flaws_cloudtrail:0000567:15aea96d-45e2-4f02-9aa1-f78eb1a69e35", "row_index": 567, "timestamp": "2019-05-27T23:40:19Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15aea96d-45e2-4f02-9aa1-f78eb1a69e35", "eventTime": "2019-05-27T23:40:19Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae41cab4-c78d-4f61-a615-841de902a5ac", "record_id": "flaws_cloudtrail:0000568:ae41cab4-c78d-4f61-a615-841de902a5ac", "row_index": 568, "timestamp": "2019-05-27T23:40:19Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae41cab4-c78d-4f61-a615-841de902a5ac", "eventTime": "2019-05-27T23:40:19Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f09956-1f45-4443-aa12-dbb202e7ca74", "record_id": "flaws_cloudtrail:0000569:7f09956-1f45-4443-aa12-dbb202e7ca74", "row_index": 569, "timestamp": "2019-05-27T23:40:19Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f09956-1f45-4443-aa12-dbb202e7ca74", "eventTime": "2019-05-27T23:40:19Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d17f9991-1850-48c1-8750-a09c5d081d66", "record_id": "flaws_cloudtrail:0000570:d17f9991-1850-48c1-8750-a09c5d081d66", "row_index": 570, "timestamp": "2019-05-27T23:40:19Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d17f9991-1850-48c1-8750-a09c5d081d66", "eventTime": "2019-05-27T23:40:19Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ec2dd8a-a7c7-4855-b50e-5573c9ee44f3", "record_id": "flaws_cloudtrail:0000571:0ec2dd8a-a7c7-4855-b50e-5573c9ee44f3", "row_index": 571, "timestamp": "2019-05-27T23:40:19Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ec2dd8a-a7c7-4855-b50e-5573c9ee44f3", "eventTime": "2019-05-27T23:40:19Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9542dbb-8ee5-414d-8416-502b4e51f174", "record_id": "flaws_cloudtrail:0000572:c9542dbb-8ee5-414d-8416-502b4e51f174", "row_index": 572, "timestamp": "2019-05-27T23:40:19Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9542dbb-8ee5-414d-8416-502b4e51f174", "eventTime": "2019-05-27T23:40:19Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cd31656-887a-4669-8276-6be2b1e568482", "record_id": "flaws_cloudtrail:0000573:1cd31656-887a-4669-8276-6be2b1e568482", "row_index": 573, "timestamp": "2019-05-27T23:40:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cd31656-887a-4669-8276-6be2b1e568482", "eventTime": "2019-05-27T23:40:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e0d7e9d-8615-4dde-a442-f0f80b49a5f3", "record_id": "flaws_cloudtrail:0000574:5e0d7e9d-8615-4dde-a442-f0f80b49a5f3", "row_index": 574, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e0d7e9d-8615-4dde-a442-f0f80b49a5f3", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59b412e0-3a19-43b3-953b-cd3eb3c6ac5e", "record_id": "flaws_cloudtrail:0000575:59b412e0-3a19-43b3-953b-cd3eb3c6ac5e", "row_index": 575, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59b412e0-3a19-43b3-953b-cd3eb3c6ac5e", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34ac8ae8-ce9d-4f8e-bd33-f836681a41eb4", "record_id": "flaws_cloudtrail:0000576:34ac8ae8-ce9d-4f8e-bd33-f836681a41eb4", "row_index": 576, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34ac8ae8-ce9d-4f8e-bd33-f836681a41eb4", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "553f0570-9a4f-4772-abf2-159cd0839a31", "record_id": "flaws_cloudtrail:0000577:553f0570-9a4f-4772-abf2-159cd0839a31", "row_index": 577, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "553f0570-9a4f-4772-abf2-159cd0839a31", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e325975a0-11fc-489f-982b-31a9eea9e7bd", "record_id": "flaws_cloudtrail:0000578:e325975a0-11fc-489f-982b-31a9eea9e7bd", "row_index": 578, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e325975a0-11fc-489f-982b-31a9eea9e7bd", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c59d325c-b5cd-45dc-8e64-a095e7a8ffb6", "record_id": "flaws_cloudtrail:0000579:c59d325c-b5cd-45dc-8e64-a095e7a8ffb6", "row_index": 579, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c59d325c-b5cd-45dc-8e64-a095e7a8ffb6", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a2ea9a4-4ecc-4efa-aaee-7c59c12c27e7", "record_id": "flaws_cloudtrail:0000580:2a2ea9a4-4ecc-4efa-aaee-7c59c12c27e7", "row_index": 580, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a2ea9a4-4ecc-4efa-aaee-7c59c12c27e7", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dac7ed54-c58b-4bce-a84c-b6f39e051b4f", "record_id": "flaws_cloudtrail:0000581:dac7ed54-c58b-4bce-a84c-b6f39e051b4f", "row_index": 581, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dac7ed54-c58b-4bce-a84c-b6f39e051b4f", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18687b-4b46-41e5-af5e-2d5c3f8ff0f2", "record_id": "flaws_cloudtrail:0000582:18687b-4b46-41e5-af5e-2d5c3f8ff0f2", "row_index": 582, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18687b-4b46-41e5-af5e-2d5c3f8ff0f2", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecad7c44-4251-4810-a2be-e2dfbabd9a61", "record_id": "flaws_cloudtrail:0000583:ecad7c44-4251-4810-a2be-e2dfbabd9a61", "row_index": 583, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecad7c44-4251-4810-a2be-e2dfbabd9a61", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e0d7e9d-8615-4dde-a442-f0f80b49a5f3", "record_id": "flaws_cloudtrail:0000584:5e0d7e9d-8615-4dde-a442-f0f80b49a5f3", "row_index": 584, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e0d7e9d-8615-4dde-a442-f0f80b49a5f3", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59b412e0-3a19-43b3-953b-cd3eb3c6ac5e", "record_id": "flaws_cloudtrail:0000585:59b412e0-3a19-43b3-953b-cd3eb3c6ac5e", "row_index": 585, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59b412e0-3a19-43b3-953b-cd3eb3c6ac5e", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34ac8ae8-ce9d-4f8e-bd33-f836681a41eb4", "record_id": "flaws_cloudtrail:0000586:34ac8ae8-ce9d-4f8e-bd33-f836681a41eb4", "row_index": 586, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34ac8ae8-ce9d-4f8e-bd33-f836681a41eb4", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "553f0570-9a4f-4772-abf2-159cd0839a31", "record_id": "flaws_cloudtrail:0000587:553f0570-9a4f-4772-abf2-159cd0839a31", "row_index": 587, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "553f0570-9a4f-4772-abf2-159cd0839a31", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e325975a0-11fc-489f-982b-31a9eea9e7bd", "record_id": "flaws_cloudtrail:0000588:e325975a0-11fc-489f-982b-31a9eea9e7bd", "row_index": 588, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e325975a0-11fc-489f-982b-31a9eea9e7bd", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c59d325c-b5cd-45dc-8e64-a095e7a8ffb6", "record_id": "flaws_cloudtrail:0000589:c59d325c-b5cd-45dc-8e64-a095e7a8ffb6", "row_index": 589, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c59d325c-b5cd-45dc-8e64-a095e7a8ffb6", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a2ea9a4-4ecc-4efa-aaee-7c59c12c27e7", "record_id": "flaws_cloudtrail:0000590:2a2ea9a4-4ecc-4efa-aaee-7c59c12c27e7", "row_index": 590, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a2ea9a4-4ecc-4efa-aaee-7c59c12c27e7", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dac7ed54-c58b-4bce-a84c-b6f39e051b4f", "record_id": "flaws_cloudtrail:0000591:dac7ed54-c58b-4bce-a84c-b6f39e051b4f", "row_index": 591, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dac7ed54-c58b-4bce-a84c-b6f39e051b4f", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18687b-4b46-41e5-af5e-2d5c3f8ff0f2", "record_id": "flaws_cloudtrail:0000592:18687b-4b46-41e5-af5e-2d5c3f8ff0f2", "row_index": 592, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18687b-4b46-41e5-af5e-2d5c3f8ff0f2", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecad7c44-4251-4810-a2be-e2dfbabd9a61", "record_id": "flaws_cloudtrail:0000593:ecad7c44-4251-4810-a2be-e2dfbabd9a61", "row_index": 593, "timestamp": "2019-05-27T23:40:20Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecad7c44-4251-4810-a2be-e2dfbabd9a61", "eventTime": "2019-05-27T23:40:20Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da76418e-c19a-4727-a403-c3567df6a16a", "record_id": "flaws_cloudtrail:0000594:da76418e-c19a-4727-a403-c3567df6a16a", "row_index": 594, "timestamp": "2019-05-27T23:40:21Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da76418e-c19a-4727-a403-c3567df6a16a", "eventTime": "2019-05-27T23:40:21Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd4de7d9-1268-4f37-a1c4-1fc7d1cd4a14", "record_id": "flaws_cloudtrail:0000595:cd4de7d9-1268-4f37-a1c4-1fc7d1cd4a14", "row_index": 595, "timestamp": "2019-05-27T23:40:21Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd4de7d9-1268-4f37-a1c4-1fc7d1cd4a14", "eventTime": "2019-05-27T23:40:21Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "070ed1eb-ca89-43d2-9b6a-c84cb61e0603", "record_id": "flaws_cloudtrail:0000596:070ed1eb-ca89-43d2-9b6a-c84cb61e0603", "row_index": 596, "timestamp": "2019-05-27T23:40:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "070ed1eb-ca89-43d2-9b6a-c84cb61e0603", "eventTime": "2019-05-27T23:40:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa4d103e-4960-4345-b1b2-301bd2e885211", "record_id": "flaws_cloudtrail:0000597:fa4d103e-4960-4345-b1b2-301bd2e885211", "row_index": 597, "timestamp": "2019-05-27T23:40:21Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa4d103e-4960-4345-b1b2-301bd2e885211", "eventTime": "2019-05-27T23:40:21Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da76418e-c19a-4727-a403-c3567df6a16a", "record_id": "flaws_cloudtrail:0000598:da76418e-c19a-4727-a403-c3567df6a16a", "row_index": 598, "timestamp": "2019-05-27T23:40:21Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da76418e-c19a-4727-a403-c3567df6a16a", "eventTime": "2019-05-27T23:40:21Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd4de7d9-1268-4f37-a1c4-1fc7d1cd4a14", "record_id": "flaws_cloudtrail:0000599:cd4de7d9-1268-4f37-a1c4-1fc7d1cd4a14", "row_index": 599, "timestamp": "2019-05-27T23:40:21Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd4de7d9-1268-4f37-a1c4-1fc7d1cd4a14", "eventTime": "2019-05-27T23:40:21Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "070ed1eb-ca89-43d2-9b6a-c84cb61e0603", "record_id": "flaws_cloudtrail:0000600:070ed1eb-ca89-43d2-9b6a-c84cb61e0603", "row_index": 600, "timestamp": "2019-05-27T23:40:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "070ed1eb-ca89-43d2-9b6a-c84cb61e0603", "eventTime": "2019-05-27T23:40:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa4d103e-4960-4345-b1b2-301bd2e885211", "record_id": "flaws_cloudtrail:0000601:fa4d103e-4960-4345-b1b2-301bd2e885211", "row_index": 601, "timestamp": "2019-05-27T23:40:21Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa4d103e-4960-4345-b1b2-301bd2e885211", "eventTime": "2019-05-27T23:40:21Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "102146fbe-5250-46b0-a8db-89f4ee509046", "record_id": "flaws_cloudtrail:0000602:102146fbe-5250-46b0-a8db-89f4ee509046", "row_index": 602, "timestamp": "2019-05-27T23:40:22Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "102146fbe-5250-46b0-a8db-89f4ee509046", "eventTime": "2019-05-27T23:40:22Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "662895-ebc4-4667-b1d6-88efae80a350", "record_id": "flaws_cloudtrail:0000603:662895-ebc4-4667-b1d6-88efae80a350", "row_index": 603, "timestamp": "2019-05-27T23:40:22Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "662895-ebc4-4667-b1d6-88efae80a350", "eventTime": "2019-05-27T23:40:22Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fa7f6af-eff2-4344-9195-a3c9b2caed80", "record_id": "flaws_cloudtrail:0000604:8fa7f6af-eff2-4344-9195-a3c9b2caed80", "row_index": 604, "timestamp": "2019-05-27T23:40:22Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.13.153.253", "user_agent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fa7f6af-eff2-4344-9195-a3c9b2caed80", "eventTime": "2019-05-27T23:40:22Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.13.153.253", "userAgent": "Boto3/1.7.48 Python/3.7.3 Linux/5.1.4-arch1-1-ARCH Botocore/1.10.48", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}