Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM actor appears to validate their access, survey IAM identities and credentials, and then establish a new credentialed identity with permissions. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets they touched or created. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fce3bfb5-5ccb-4e40-aef4-d38a8be2aa71", "record_id": "flaws_cloudtrail:0000000:fce3bfb5-5ccb-4e40-aef4-d38a8be2aa71", "row_index": 0, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fce3bfb5-5ccb-4e40-aef4-d38a8be2aa71", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a49e44f8-32a7-4adb-82a2-1b23c100010", "record_id": "flaws_cloudtrail:0000001:a49e44f8-32a7-4adb-82a2-1b23c100010", "row_index": 1, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a49e44f8-32a7-4adb-82a2-1b23c100010", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecc2f6b0-c60e-4cae-ab15-31db557f1d05", "record_id": "flaws_cloudtrail:0000002:ecc2f6b0-c60e-4cae-ab15-31db557f1d05", "row_index": 2, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecc2f6b0-c60e-4cae-ab15-31db557f1d05", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2998e55e-5f35-47f7-a7b9-4cb65b7526dd", "record_id": "flaws_cloudtrail:0000003:2998e55e-5f35-47f7-a7b9-4cb65b7526dd", "row_index": 3, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2998e55e-5f35-47f7-a7b9-4cb65b7526dd", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13633b7e-c0cf-48f9-88c1-05d2d7ef6521", "record_id": "flaws_cloudtrail:0000004:13633b7e-c0cf-48f9-88c1-05d2d7ef6521", "row_index": 4, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13633b7e-c0cf-48f9-88c1-05d2d7ef6521", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c10bc23-aa83-4a25-9ba3-4a87a9679c52", "record_id": "flaws_cloudtrail:0000005:9c10bc23-aa83-4a25-9ba3-4a87a9679c52", "row_index": 5, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c10bc23-aa83-4a25-9ba3-4a87a9679c52", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a1da930-52a3-4c12-afff-731d1a5eeda6", "record_id": "flaws_cloudtrail:0000006:7a1da930-52a3-4c12-afff-731d1a5eeda6", "row_index": 6, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a1da930-52a3-4c12-afff-731d1a5eeda6", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f04b05e-171e-4a91-a18e-4393cb32c159", "record_id": "flaws_cloudtrail:0000007:6f04b05e-171e-4a91-a18e-4393cb32c159", "row_index": 7, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f04b05e-171e-4a91-a18e-4393cb32c159", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85e9f557-f5b5-4d54-b7c5-f2059b4da742", "record_id": "flaws_cloudtrail:0000008:85e9f557-f5b5-4d54-b7c5-f2059b4da742", "row_index": 8, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85e9f557-f5b5-4d54-b7c5-f2059b4da742", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e4fdf4f-54da-408e-97e7-ba26208b53", "record_id": "flaws_cloudtrail:0000009:2e4fdf4f-54da-408e-97e7-ba26208b53", "row_index": 9, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e4fdf4f-54da-408e-97e7-ba26208b53", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "949603-0be4-4f67-a907-ec52b12c9f09", "record_id": "flaws_cloudtrail:0000010:949603-0be4-4f67-a907-ec52b12c9f09", "row_index": 10, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "949603-0be4-4f67-a907-ec52b12c9f09", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "555c8978-d716-4782-8d72-282fa08ea8c2", "record_id": "flaws_cloudtrail:0000011:555c8978-d716-4782-8d72-282fa08ea8c2", "row_index": 11, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "555c8978-d716-4782-8d72-282fa08ea8c2", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd5f33ae-26bb-427f-82e6-d8e14b248f35", "record_id": "flaws_cloudtrail:0000012:cd5f33ae-26bb-427f-82e6-d8e14b248f35", "row_index": 12, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd5f33ae-26bb-427f-82e6-d8e14b248f35", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f17a33bc-2841-425a-91a9-b85ec2904c75", "record_id": "flaws_cloudtrail:0000013:f17a33bc-2841-425a-91a9-b85ec2904c75", "row_index": 13, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f17a33bc-2841-425a-91a9-b85ec2904c75", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f0748b6-ede3-45c5-aac9-09e3ca1e197d", "record_id": "flaws_cloudtrail:0000014:2f0748b6-ede3-45c5-aac9-09e3ca1e197d", "row_index": 14, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f0748b6-ede3-45c5-aac9-09e3ca1e197d", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6d579b5-0c63-4d61-869e-3c2e9cb0755d", "record_id": "flaws_cloudtrail:0000015:c6d579b5-0c63-4d61-869e-3c2e9cb0755d", "row_index": 15, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6d579b5-0c63-4d61-869e-3c2e9cb0755d", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a58540-92bb-4d56-bff4-d9ce4275fbca", "record_id": "flaws_cloudtrail:0000016:4a58540-92bb-4d56-bff4-d9ce4275fbca", "row_index": 16, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a58540-92bb-4d56-bff4-d9ce4275fbca", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da497203-03e4-468f-b252-d99a7f662205c", "record_id": "flaws_cloudtrail:0000017:da497203-03e4-468f-b252-d99a7f662205c", "row_index": 17, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da497203-03e4-468f-b252-d99a7f662205c", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d95555-517d-4fc2-8973-f8f7b253af1b", "record_id": "flaws_cloudtrail:0000018:d95555-517d-4fc2-8973-f8f7b253af1b", "row_index": 18, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d95555-517d-4fc2-8973-f8f7b253af1b", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d99193-5590-43b4-9b11-dd7fa6abecdb", "record_id": "flaws_cloudtrail:0000019:d99193-5590-43b4-9b11-dd7fa6abecdb", "row_index": 19, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d99193-5590-43b4-9b11-dd7fa6abecdb", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9e93a0e-7914-43d9-8a5f-fcd5d22c5d20", "record_id": "flaws_cloudtrail:0000020:f9e93a0e-7914-43d9-8a5f-fcd5d22c5d20", "row_index": 20, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9e93a0e-7914-43d9-8a5f-fcd5d22c5d20", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11f4e9c3-e93e-41f6-9c31-bed04a750110", "record_id": "flaws_cloudtrail:0000021:11f4e9c3-e93e-41f6-9c31-bed04a750110", "row_index": 21, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11f4e9c3-e93e-41f6-9c31-bed04a750110", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "592fd975-9ab8-43b7-ac59-d423b3949d0f", "record_id": "flaws_cloudtrail:0000022:592fd975-9ab8-43b7-ac59-d423b3949d0f", "row_index": 22, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "592fd975-9ab8-43b7-ac59-d423b3949d0f", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "632e9f2f-2c0a-4854-bf6e-6ee37f5032b3", "record_id": "flaws_cloudtrail:0000023:632e9f2f-2c0a-4854-bf6e-6ee37f5032b3", "row_index": 23, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "632e9f2f-2c0a-4854-bf6e-6ee37f5032b3", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70ec01ca-579f-4014-93bb-f6ef18ca3758", "record_id": "flaws_cloudtrail:0000024:70ec01ca-579f-4014-93bb-f6ef18ca3758", "row_index": 24, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70ec01ca-579f-4014-93bb-f6ef18ca3758", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a9e5866-b21d-4b7d-acc3-8b994c6e3083", "record_id": "flaws_cloudtrail:0000025:1a9e5866-b21d-4b7d-acc3-8b994c6e3083", "row_index": 25, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a9e5866-b21d-4b7d-acc3-8b994c6e3083", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fce3bfb5-5ccb-4e40-aef4-d38a8be2aa71", "record_id": "flaws_cloudtrail:0000026:fce3bfb5-5ccb-4e40-aef4-d38a8be2aa71", "row_index": 26, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fce3bfb5-5ccb-4e40-aef4-d38a8be2aa71", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a49e44f8-32a7-4adb-82a2-1b23c100010", "record_id": "flaws_cloudtrail:0000027:a49e44f8-32a7-4adb-82a2-1b23c100010", "row_index": 27, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a49e44f8-32a7-4adb-82a2-1b23c100010", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecc2f6b0-c60e-4cae-ab15-31db557f1d05", "record_id": "flaws_cloudtrail:0000028:ecc2f6b0-c60e-4cae-ab15-31db557f1d05", "row_index": 28, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecc2f6b0-c60e-4cae-ab15-31db557f1d05", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2998e55e-5f35-47f7-a7b9-4cb65b7526dd", "record_id": "flaws_cloudtrail:0000029:2998e55e-5f35-47f7-a7b9-4cb65b7526dd", "row_index": 29, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2998e55e-5f35-47f7-a7b9-4cb65b7526dd", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13633b7e-c0cf-48f9-88c1-05d2d7ef6521", "record_id": "flaws_cloudtrail:0000030:13633b7e-c0cf-48f9-88c1-05d2d7ef6521", "row_index": 30, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13633b7e-c0cf-48f9-88c1-05d2d7ef6521", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c10bc23-aa83-4a25-9ba3-4a87a9679c52", "record_id": "flaws_cloudtrail:0000031:9c10bc23-aa83-4a25-9ba3-4a87a9679c52", "row_index": 31, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c10bc23-aa83-4a25-9ba3-4a87a9679c52", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a1da930-52a3-4c12-afff-731d1a5eeda6", "record_id": "flaws_cloudtrail:0000032:7a1da930-52a3-4c12-afff-731d1a5eeda6", "row_index": 32, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a1da930-52a3-4c12-afff-731d1a5eeda6", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f04b05e-171e-4a91-a18e-4393cb32c159", "record_id": "flaws_cloudtrail:0000033:6f04b05e-171e-4a91-a18e-4393cb32c159", "row_index": 33, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f04b05e-171e-4a91-a18e-4393cb32c159", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85e9f557-f5b5-4d54-b7c5-f2059b4da742", "record_id": "flaws_cloudtrail:0000034:85e9f557-f5b5-4d54-b7c5-f2059b4da742", "row_index": 34, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85e9f557-f5b5-4d54-b7c5-f2059b4da742", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e4fdf4f-54da-408e-97e7-ba26208b53", "record_id": "flaws_cloudtrail:0000035:2e4fdf4f-54da-408e-97e7-ba26208b53", "row_index": 35, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e4fdf4f-54da-408e-97e7-ba26208b53", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "949603-0be4-4f67-a907-ec52b12c9f09", "record_id": "flaws_cloudtrail:0000036:949603-0be4-4f67-a907-ec52b12c9f09", "row_index": 36, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "949603-0be4-4f67-a907-ec52b12c9f09", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "555c8978-d716-4782-8d72-282fa08ea8c2", "record_id": "flaws_cloudtrail:0000037:555c8978-d716-4782-8d72-282fa08ea8c2", "row_index": 37, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "555c8978-d716-4782-8d72-282fa08ea8c2", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd5f33ae-26bb-427f-82e6-d8e14b248f35", "record_id": "flaws_cloudtrail:0000038:cd5f33ae-26bb-427f-82e6-d8e14b248f35", "row_index": 38, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd5f33ae-26bb-427f-82e6-d8e14b248f35", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f17a33bc-2841-425a-91a9-b85ec2904c75", "record_id": "flaws_cloudtrail:0000039:f17a33bc-2841-425a-91a9-b85ec2904c75", "row_index": 39, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f17a33bc-2841-425a-91a9-b85ec2904c75", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f0748b6-ede3-45c5-aac9-09e3ca1e197d", "record_id": "flaws_cloudtrail:0000040:2f0748b6-ede3-45c5-aac9-09e3ca1e197d", "row_index": 40, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f0748b6-ede3-45c5-aac9-09e3ca1e197d", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6d579b5-0c63-4d61-869e-3c2e9cb0755d", "record_id": "flaws_cloudtrail:0000041:c6d579b5-0c63-4d61-869e-3c2e9cb0755d", "row_index": 41, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6d579b5-0c63-4d61-869e-3c2e9cb0755d", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a58540-92bb-4d56-bff4-d9ce4275fbca", "record_id": "flaws_cloudtrail:0000042:4a58540-92bb-4d56-bff4-d9ce4275fbca", "row_index": 42, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a58540-92bb-4d56-bff4-d9ce4275fbca", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da497203-03e4-468f-b252-d99a7f662205c", "record_id": "flaws_cloudtrail:0000043:da497203-03e4-468f-b252-d99a7f662205c", "row_index": 43, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da497203-03e4-468f-b252-d99a7f662205c", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d95555-517d-4fc2-8973-f8f7b253af1b", "record_id": "flaws_cloudtrail:0000044:d95555-517d-4fc2-8973-f8f7b253af1b", "row_index": 44, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d95555-517d-4fc2-8973-f8f7b253af1b", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d99193-5590-43b4-9b11-dd7fa6abecdb", "record_id": "flaws_cloudtrail:0000045:d99193-5590-43b4-9b11-dd7fa6abecdb", "row_index": 45, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d99193-5590-43b4-9b11-dd7fa6abecdb", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9e93a0e-7914-43d9-8a5f-fcd5d22c5d20", "record_id": "flaws_cloudtrail:0000046:f9e93a0e-7914-43d9-8a5f-fcd5d22c5d20", "row_index": 46, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9e93a0e-7914-43d9-8a5f-fcd5d22c5d20", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11f4e9c3-e93e-41f6-9c31-bed04a750110", "record_id": "flaws_cloudtrail:0000047:11f4e9c3-e93e-41f6-9c31-bed04a750110", "row_index": 47, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11f4e9c3-e93e-41f6-9c31-bed04a750110", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "592fd975-9ab8-43b7-ac59-d423b3949d0f", "record_id": "flaws_cloudtrail:0000048:592fd975-9ab8-43b7-ac59-d423b3949d0f", "row_index": 48, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "592fd975-9ab8-43b7-ac59-d423b3949d0f", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "632e9f2f-2c0a-4854-bf6e-6ee37f5032b3", "record_id": "flaws_cloudtrail:0000049:632e9f2f-2c0a-4854-bf6e-6ee37f5032b3", "row_index": 49, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "632e9f2f-2c0a-4854-bf6e-6ee37f5032b3", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70ec01ca-579f-4014-93bb-f6ef18ca3758", "record_id": "flaws_cloudtrail:0000050:70ec01ca-579f-4014-93bb-f6ef18ca3758", "row_index": 50, "timestamp": "2019-06-06T11:32:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70ec01ca-579f-4014-93bb-f6ef18ca3758", "eventTime": "2019-06-06T11:32:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "889c9c10-0f6e-44f7-9bec-8bade92d961f", "record_id": "flaws_cloudtrail:0000051:889c9c10-0f6e-44f7-9bec-8bade92d961f", "row_index": 51, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "889c9c10-0f6e-44f7-9bec-8bade92d961f", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36ade690-c006-4d34-8db9-f15e344baebd", "record_id": "flaws_cloudtrail:0000052:36ade690-c006-4d34-8db9-f15e344baebd", "row_index": 52, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36ade690-c006-4d34-8db9-f15e344baebd", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fe53bcd-51aa-4698-9162-e5aaf405f313", "record_id": "flaws_cloudtrail:0000053:3fe53bcd-51aa-4698-9162-e5aaf405f313", "row_index": 53, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fe53bcd-51aa-4698-9162-e5aaf405f313", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b01d896-5f17-4e2a-b245-16227ec85c1c", "record_id": "flaws_cloudtrail:0000054:1b01d896-5f17-4e2a-b245-16227ec85c1c", "row_index": 54, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b01d896-5f17-4e2a-b245-16227ec85c1c", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab54598-5f73-4856-921c-adff14e5a06f", "record_id": "flaws_cloudtrail:0000055:ab54598-5f73-4856-921c-adff14e5a06f", "row_index": 55, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab54598-5f73-4856-921c-adff14e5a06f", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e2a7255-0053-4d6f-9c76-7816f655a91b", "record_id": "flaws_cloudtrail:0000056:5e2a7255-0053-4d6f-9c76-7816f655a91b", "row_index": 56, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e2a7255-0053-4d6f-9c76-7816f655a91b", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a43e42e1-3cf4-4575-9f8a-022e5be53d3f", "record_id": "flaws_cloudtrail:0000057:a43e42e1-3cf4-4575-9f8a-022e5be53d3f", "row_index": 57, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a43e42e1-3cf4-4575-9f8a-022e5be53d3f", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e71a3035-9e93-4970-8bd3-370287c95407", "record_id": "flaws_cloudtrail:0000058:e71a3035-9e93-4970-8bd3-370287c95407", "row_index": 58, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e71a3035-9e93-4970-8bd3-370287c95407", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "889c9c10-0f6e-44f7-9bec-8bade92d961f", "record_id": "flaws_cloudtrail:0000059:889c9c10-0f6e-44f7-9bec-8bade92d961f", "row_index": 59, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "889c9c10-0f6e-44f7-9bec-8bade92d961f", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36ade690-c006-4d34-8db9-f15e344baebd", "record_id": "flaws_cloudtrail:0000060:36ade690-c006-4d34-8db9-f15e344baebd", "row_index": 60, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36ade690-c006-4d34-8db9-f15e344baebd", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fe53bcd-51aa-4698-9162-e5aaf405f313", "record_id": "flaws_cloudtrail:0000061:3fe53bcd-51aa-4698-9162-e5aaf405f313", "row_index": 61, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fe53bcd-51aa-4698-9162-e5aaf405f313", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b01d896-5f17-4e2a-b245-16227ec85c1c", "record_id": "flaws_cloudtrail:0000062:1b01d896-5f17-4e2a-b245-16227ec85c1c", "row_index": 62, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b01d896-5f17-4e2a-b245-16227ec85c1c", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab54598-5f73-4856-921c-adff14e5a06f", "record_id": "flaws_cloudtrail:0000063:ab54598-5f73-4856-921c-adff14e5a06f", "row_index": 63, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab54598-5f73-4856-921c-adff14e5a06f", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e2a7255-0053-4d6f-9c76-7816f655a91b", "record_id": "flaws_cloudtrail:0000064:5e2a7255-0053-4d6f-9c76-7816f655a91b", "row_index": 64, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e2a7255-0053-4d6f-9c76-7816f655a91b", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a43e42e1-3cf4-4575-9f8a-022e5be53d3f", "record_id": "flaws_cloudtrail:0000065:a43e42e1-3cf4-4575-9f8a-022e5be53d3f", "row_index": 65, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a43e42e1-3cf4-4575-9f8a-022e5be53d3f", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e71a3035-9e93-4970-8bd3-370287c95407", "record_id": "flaws_cloudtrail:0000066:e71a3035-9e93-4970-8bd3-370287c95407", "row_index": 66, "timestamp": "2019-06-06T11:32:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e71a3035-9e93-4970-8bd3-370287c95407", "eventTime": "2019-06-06T11:32:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aec43777-488c-47d5-8a7b-fb6d1b065a68", "record_id": "flaws_cloudtrail:0000067:aec43777-488c-47d5-8a7b-fb6d1b065a68", "row_index": 67, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aec43777-488c-47d5-8a7b-fb6d1b065a68", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e75804-8c2e-4565-af47-9746fb1b5350", "record_id": "flaws_cloudtrail:0000068:e75804-8c2e-4565-af47-9746fb1b5350", "row_index": 68, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e75804-8c2e-4565-af47-9746fb1b5350", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22f19ac0-c5f0-4877-bb72-6aed58873", "record_id": "flaws_cloudtrail:0000069:22f19ac0-c5f0-4877-bb72-6aed58873", "row_index": 69, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22f19ac0-c5f0-4877-bb72-6aed58873", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cf41341-450e-42bb-accb-a1609fe5e149", "record_id": "flaws_cloudtrail:0000070:9cf41341-450e-42bb-accb-a1609fe5e149", "row_index": 70, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cf41341-450e-42bb-accb-a1609fe5e149", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80e4b5ca-626d-44e1-8754-459ed91a925a", "record_id": "flaws_cloudtrail:0000071:80e4b5ca-626d-44e1-8754-459ed91a925a", "row_index": 71, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80e4b5ca-626d-44e1-8754-459ed91a925a", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5ee411a-f9a8-44d8-aedb-58484e96a0f1", "record_id": "flaws_cloudtrail:0000072:a5ee411a-f9a8-44d8-aedb-58484e96a0f1", "row_index": 72, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5ee411a-f9a8-44d8-aedb-58484e96a0f1", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d33bcf2d-6ca4-4b8e-8cd0-77f00c4b509d", "record_id": "flaws_cloudtrail:0000073:d33bcf2d-6ca4-4b8e-8cd0-77f00c4b509d", "row_index": 73, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d33bcf2d-6ca4-4b8e-8cd0-77f00c4b509d", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "570d8423-5fd2-4ba3-8f65-e63014ef8fee", "record_id": "flaws_cloudtrail:0000074:570d8423-5fd2-4ba3-8f65-e63014ef8fee", "row_index": 74, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "570d8423-5fd2-4ba3-8f65-e63014ef8fee", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06c18746-6957-4e65-ac2c-cf940b79f2cc", "record_id": "flaws_cloudtrail:0000075:06c18746-6957-4e65-ac2c-cf940b79f2cc", "row_index": 75, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06c18746-6957-4e65-ac2c-cf940b79f2cc", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6482a1b-3d1f-4364-93f8-fec24b7d907a", "record_id": "flaws_cloudtrail:0000076:f6482a1b-3d1f-4364-93f8-fec24b7d907a", "row_index": 76, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6482a1b-3d1f-4364-93f8-fec24b7d907a", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e8e5877-8145-4273-aab0-c8b8959d7320", "record_id": "flaws_cloudtrail:0000077:4e8e5877-8145-4273-aab0-c8b8959d7320", "row_index": 77, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e8e5877-8145-4273-aab0-c8b8959d7320", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b697751d-494d-4632-b795-d911351", "record_id": "flaws_cloudtrail:0000078:4b697751d-494d-4632-b795-d911351", "row_index": 78, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b697751d-494d-4632-b795-d911351", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2cae1e1-5b4b-42bc-bd4f-04af00026b38", "record_id": "flaws_cloudtrail:0000079:e2cae1e1-5b4b-42bc-bd4f-04af00026b38", "row_index": 79, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2cae1e1-5b4b-42bc-bd4f-04af00026b38", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68694e-9342-4262-ab4a-1284b2a74447", "record_id": "flaws_cloudtrail:0000080:68694e-9342-4262-ab4a-1284b2a74447", "row_index": 80, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68694e-9342-4262-ab4a-1284b2a74447", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aec43777-488c-47d5-8a7b-fb6d1b065a68", "record_id": "flaws_cloudtrail:0000081:aec43777-488c-47d5-8a7b-fb6d1b065a68", "row_index": 81, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aec43777-488c-47d5-8a7b-fb6d1b065a68", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e75804-8c2e-4565-af47-9746fb1b5350", "record_id": "flaws_cloudtrail:0000082:e75804-8c2e-4565-af47-9746fb1b5350", "row_index": 82, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e75804-8c2e-4565-af47-9746fb1b5350", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22f19ac0-c5f0-4877-bb72-6aed58873", "record_id": "flaws_cloudtrail:0000083:22f19ac0-c5f0-4877-bb72-6aed58873", "row_index": 83, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22f19ac0-c5f0-4877-bb72-6aed58873", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cf41341-450e-42bb-accb-a1609fe5e149", "record_id": "flaws_cloudtrail:0000084:9cf41341-450e-42bb-accb-a1609fe5e149", "row_index": 84, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cf41341-450e-42bb-accb-a1609fe5e149", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80e4b5ca-626d-44e1-8754-459ed91a925a", "record_id": "flaws_cloudtrail:0000085:80e4b5ca-626d-44e1-8754-459ed91a925a", "row_index": 85, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80e4b5ca-626d-44e1-8754-459ed91a925a", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5ee411a-f9a8-44d8-aedb-58484e96a0f1", "record_id": "flaws_cloudtrail:0000086:a5ee411a-f9a8-44d8-aedb-58484e96a0f1", "row_index": 86, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5ee411a-f9a8-44d8-aedb-58484e96a0f1", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d33bcf2d-6ca4-4b8e-8cd0-77f00c4b509d", "record_id": "flaws_cloudtrail:0000087:d33bcf2d-6ca4-4b8e-8cd0-77f00c4b509d", "row_index": 87, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d33bcf2d-6ca4-4b8e-8cd0-77f00c4b509d", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "570d8423-5fd2-4ba3-8f65-e63014ef8fee", "record_id": "flaws_cloudtrail:0000088:570d8423-5fd2-4ba3-8f65-e63014ef8fee", "row_index": 88, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "570d8423-5fd2-4ba3-8f65-e63014ef8fee", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06c18746-6957-4e65-ac2c-cf940b79f2cc", "record_id": "flaws_cloudtrail:0000089:06c18746-6957-4e65-ac2c-cf940b79f2cc", "row_index": 89, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06c18746-6957-4e65-ac2c-cf940b79f2cc", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6482a1b-3d1f-4364-93f8-fec24b7d907a", "record_id": "flaws_cloudtrail:0000090:f6482a1b-3d1f-4364-93f8-fec24b7d907a", "row_index": 90, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6482a1b-3d1f-4364-93f8-fec24b7d907a", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e8e5877-8145-4273-aab0-c8b8959d7320", "record_id": "flaws_cloudtrail:0000091:4e8e5877-8145-4273-aab0-c8b8959d7320", "row_index": 91, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e8e5877-8145-4273-aab0-c8b8959d7320", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b697751d-494d-4632-b795-d911351", "record_id": "flaws_cloudtrail:0000092:4b697751d-494d-4632-b795-d911351", "row_index": 92, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b697751d-494d-4632-b795-d911351", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2cae1e1-5b4b-42bc-bd4f-04af00026b38", "record_id": "flaws_cloudtrail:0000093:e2cae1e1-5b4b-42bc-bd4f-04af00026b38", "row_index": 93, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2cae1e1-5b4b-42bc-bd4f-04af00026b38", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68694e-9342-4262-ab4a-1284b2a74447", "record_id": "flaws_cloudtrail:0000094:68694e-9342-4262-ab4a-1284b2a74447", "row_index": 94, "timestamp": "2019-06-06T11:32:07Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68694e-9342-4262-ab4a-1284b2a74447", "eventTime": "2019-06-06T11:32:07Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56b1f149-16c3-4ed8-9163-6c351d11e0a1", "record_id": "flaws_cloudtrail:0000095:56b1f149-16c3-4ed8-9163-6c351d11e0a1", "row_index": 95, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56b1f149-16c3-4ed8-9163-6c351d11e0a1", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02e7c19c-8fdc-448c-8a7c-088793ce5358", "record_id": "flaws_cloudtrail:0000096:02e7c19c-8fdc-448c-8a7c-088793ce5358", "row_index": 96, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02e7c19c-8fdc-448c-8a7c-088793ce5358", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95025a-8f79-4cc8-84c7-7cd2a770c1de", "record_id": "flaws_cloudtrail:0000097:95025a-8f79-4cc8-84c7-7cd2a770c1de", "row_index": 97, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95025a-8f79-4cc8-84c7-7cd2a770c1de", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38e7f490-2768-442f-b9f0-d384365af89", "record_id": "flaws_cloudtrail:0000098:38e7f490-2768-442f-b9f0-d384365af89", "row_index": 98, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38e7f490-2768-442f-b9f0-d384365af89", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa7a2d25-56a9-4b0f-8846-0a79ee91353", "record_id": "flaws_cloudtrail:0000099:aa7a2d25-56a9-4b0f-8846-0a79ee91353", "row_index": 99, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa7a2d25-56a9-4b0f-8846-0a79ee91353", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdb70f73-e380-4283-b58b-912e352e067f", "record_id": "flaws_cloudtrail:0000100:bdb70f73-e380-4283-b58b-912e352e067f", "row_index": 100, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdb70f73-e380-4283-b58b-912e352e067f", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f9d67d6-5564-4451-9673-f713b7a28e78", "record_id": "flaws_cloudtrail:0000101:6f9d67d6-5564-4451-9673-f713b7a28e78", "row_index": 101, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f9d67d6-5564-4451-9673-f713b7a28e78", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80960-2f41-4d60-a7ca-a1354d4a344e", "record_id": "flaws_cloudtrail:0000102:80960-2f41-4d60-a7ca-a1354d4a344e", "row_index": 102, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80960-2f41-4d60-a7ca-a1354d4a344e", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc3958e6-a0af-4ffe-a88b-1c2426306d2b", "record_id": "flaws_cloudtrail:0000103:dc3958e6-a0af-4ffe-a88b-1c2426306d2b", "row_index": 103, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc3958e6-a0af-4ffe-a88b-1c2426306d2b", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14a82b85-4b5d-4d52-aa1c-a084d3a5018f", "record_id": "flaws_cloudtrail:0000104:14a82b85-4b5d-4d52-aa1c-a084d3a5018f", "row_index": 104, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14a82b85-4b5d-4d52-aa1c-a084d3a5018f", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "838523-41e1-4966-80be-ac13de955cb5", "record_id": "flaws_cloudtrail:0000105:838523-41e1-4966-80be-ac13de955cb5", "row_index": 105, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "838523-41e1-4966-80be-ac13de955cb5", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1f3423d-abb3-48a3-bdf2-9cbef10cd2ef", "record_id": "flaws_cloudtrail:0000106:f1f3423d-abb3-48a3-bdf2-9cbef10cd2ef", "row_index": 106, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1f3423d-abb3-48a3-bdf2-9cbef10cd2ef", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56b1f149-16c3-4ed8-9163-6c351d11e0a1", "record_id": "flaws_cloudtrail:0000107:56b1f149-16c3-4ed8-9163-6c351d11e0a1", "row_index": 107, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56b1f149-16c3-4ed8-9163-6c351d11e0a1", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02e7c19c-8fdc-448c-8a7c-088793ce5358", "record_id": "flaws_cloudtrail:0000108:02e7c19c-8fdc-448c-8a7c-088793ce5358", "row_index": 108, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02e7c19c-8fdc-448c-8a7c-088793ce5358", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95025a-8f79-4cc8-84c7-7cd2a770c1de", "record_id": "flaws_cloudtrail:0000109:95025a-8f79-4cc8-84c7-7cd2a770c1de", "row_index": 109, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95025a-8f79-4cc8-84c7-7cd2a770c1de", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38e7f490-2768-442f-b9f0-d384365af89", "record_id": "flaws_cloudtrail:0000110:38e7f490-2768-442f-b9f0-d384365af89", "row_index": 110, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38e7f490-2768-442f-b9f0-d384365af89", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa7a2d25-56a9-4b0f-8846-0a79ee91353", "record_id": "flaws_cloudtrail:0000111:aa7a2d25-56a9-4b0f-8846-0a79ee91353", "row_index": 111, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa7a2d25-56a9-4b0f-8846-0a79ee91353", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdb70f73-e380-4283-b58b-912e352e067f", "record_id": "flaws_cloudtrail:0000112:bdb70f73-e380-4283-b58b-912e352e067f", "row_index": 112, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdb70f73-e380-4283-b58b-912e352e067f", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f9d67d6-5564-4451-9673-f713b7a28e78", "record_id": "flaws_cloudtrail:0000113:6f9d67d6-5564-4451-9673-f713b7a28e78", "row_index": 113, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f9d67d6-5564-4451-9673-f713b7a28e78", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80960-2f41-4d60-a7ca-a1354d4a344e", "record_id": "flaws_cloudtrail:0000114:80960-2f41-4d60-a7ca-a1354d4a344e", "row_index": 114, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80960-2f41-4d60-a7ca-a1354d4a344e", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc3958e6-a0af-4ffe-a88b-1c2426306d2b", "record_id": "flaws_cloudtrail:0000115:dc3958e6-a0af-4ffe-a88b-1c2426306d2b", "row_index": 115, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc3958e6-a0af-4ffe-a88b-1c2426306d2b", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14a82b85-4b5d-4d52-aa1c-a084d3a5018f", "record_id": "flaws_cloudtrail:0000116:14a82b85-4b5d-4d52-aa1c-a084d3a5018f", "row_index": 116, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14a82b85-4b5d-4d52-aa1c-a084d3a5018f", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "838523-41e1-4966-80be-ac13de955cb5", "record_id": "flaws_cloudtrail:0000117:838523-41e1-4966-80be-ac13de955cb5", "row_index": 117, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "838523-41e1-4966-80be-ac13de955cb5", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1f3423d-abb3-48a3-bdf2-9cbef10cd2ef", "record_id": "flaws_cloudtrail:0000118:f1f3423d-abb3-48a3-bdf2-9cbef10cd2ef", "row_index": 118, "timestamp": "2019-06-06T11:32:08Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1f3423d-abb3-48a3-bdf2-9cbef10cd2ef", "eventTime": "2019-06-06T11:32:08Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77c23d57-45af-412d-8257-9d380387da3f", "record_id": "flaws_cloudtrail:0000119:77c23d57-45af-412d-8257-9d380387da3f", "row_index": 119, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77c23d57-45af-412d-8257-9d380387da3f", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5ddd3de-4fae-4ce5-be6d-f5bc55369412", "record_id": "flaws_cloudtrail:0000120:d5ddd3de-4fae-4ce5-be6d-f5bc55369412", "row_index": 120, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5ddd3de-4fae-4ce5-be6d-f5bc55369412", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70b25c57-5edc-40d9-af83-e98a9eef5752", "record_id": "flaws_cloudtrail:0000121:70b25c57-5edc-40d9-af83-e98a9eef5752", "row_index": 121, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70b25c57-5edc-40d9-af83-e98a9eef5752", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35e26991-52cc-4d6c-87f0-5053ac24c329", "record_id": "flaws_cloudtrail:0000122:35e26991-52cc-4d6c-87f0-5053ac24c329", "row_index": 122, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35e26991-52cc-4d6c-87f0-5053ac24c329", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "027e1180-6e9e-44e0-99bc-7bcde157cb77", "record_id": "flaws_cloudtrail:0000123:027e1180-6e9e-44e0-99bc-7bcde157cb77", "row_index": 123, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "027e1180-6e9e-44e0-99bc-7bcde157cb77", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b794254ea-8360-4c6b-88a2-154e3621c228", "record_id": "flaws_cloudtrail:0000124:b794254ea-8360-4c6b-88a2-154e3621c228", "row_index": 124, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b794254ea-8360-4c6b-88a2-154e3621c228", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e7690c5-ca81-4440-a7b4-2592a6e3fd28", "record_id": "flaws_cloudtrail:0000125:2e7690c5-ca81-4440-a7b4-2592a6e3fd28", "row_index": 125, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e7690c5-ca81-4440-a7b4-2592a6e3fd28", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef296a8e-2f96-4a9d-8f2f-1e94c24ca2b8", "record_id": "flaws_cloudtrail:0000126:ef296a8e-2f96-4a9d-8f2f-1e94c24ca2b8", "row_index": 126, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef296a8e-2f96-4a9d-8f2f-1e94c24ca2b8", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e11b1e9-4a61-40fb-930a-212fc94bcf3a", "record_id": "flaws_cloudtrail:0000127:1e11b1e9-4a61-40fb-930a-212fc94bcf3a", "row_index": 127, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e11b1e9-4a61-40fb-930a-212fc94bcf3a", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efdfae8c-f332-452d-8ac1-6bf29d7e171f", "record_id": "flaws_cloudtrail:0000128:efdfae8c-f332-452d-8ac1-6bf29d7e171f", "row_index": 128, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efdfae8c-f332-452d-8ac1-6bf29d7e171f", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b12e6c1-9c3e-4b53-ae5a-579588d77956", "record_id": "flaws_cloudtrail:0000129:1b12e6c1-9c3e-4b53-ae5a-579588d77956", "row_index": 129, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b12e6c1-9c3e-4b53-ae5a-579588d77956", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2d6c197-a501-4a8a-95b7-979e4f39535d", "record_id": "flaws_cloudtrail:0000130:c2d6c197-a501-4a8a-95b7-979e4f39535d", "row_index": 130, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2d6c197-a501-4a8a-95b7-979e4f39535d", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77c23d57-45af-412d-8257-9d380387da3f", "record_id": "flaws_cloudtrail:0000131:77c23d57-45af-412d-8257-9d380387da3f", "row_index": 131, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77c23d57-45af-412d-8257-9d380387da3f", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5ddd3de-4fae-4ce5-be6d-f5bc55369412", "record_id": "flaws_cloudtrail:0000132:d5ddd3de-4fae-4ce5-be6d-f5bc55369412", "row_index": 132, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5ddd3de-4fae-4ce5-be6d-f5bc55369412", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70b25c57-5edc-40d9-af83-e98a9eef5752", "record_id": "flaws_cloudtrail:0000133:70b25c57-5edc-40d9-af83-e98a9eef5752", "row_index": 133, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70b25c57-5edc-40d9-af83-e98a9eef5752", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35e26991-52cc-4d6c-87f0-5053ac24c329", "record_id": "flaws_cloudtrail:0000134:35e26991-52cc-4d6c-87f0-5053ac24c329", "row_index": 134, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35e26991-52cc-4d6c-87f0-5053ac24c329", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "027e1180-6e9e-44e0-99bc-7bcde157cb77", "record_id": "flaws_cloudtrail:0000135:027e1180-6e9e-44e0-99bc-7bcde157cb77", "row_index": 135, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "027e1180-6e9e-44e0-99bc-7bcde157cb77", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b794254ea-8360-4c6b-88a2-154e3621c228", "record_id": "flaws_cloudtrail:0000136:b794254ea-8360-4c6b-88a2-154e3621c228", "row_index": 136, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b794254ea-8360-4c6b-88a2-154e3621c228", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e7690c5-ca81-4440-a7b4-2592a6e3fd28", "record_id": "flaws_cloudtrail:0000137:2e7690c5-ca81-4440-a7b4-2592a6e3fd28", "row_index": 137, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e7690c5-ca81-4440-a7b4-2592a6e3fd28", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef296a8e-2f96-4a9d-8f2f-1e94c24ca2b8", "record_id": "flaws_cloudtrail:0000138:ef296a8e-2f96-4a9d-8f2f-1e94c24ca2b8", "row_index": 138, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef296a8e-2f96-4a9d-8f2f-1e94c24ca2b8", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e11b1e9-4a61-40fb-930a-212fc94bcf3a", "record_id": "flaws_cloudtrail:0000139:1e11b1e9-4a61-40fb-930a-212fc94bcf3a", "row_index": 139, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e11b1e9-4a61-40fb-930a-212fc94bcf3a", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efdfae8c-f332-452d-8ac1-6bf29d7e171f", "record_id": "flaws_cloudtrail:0000140:efdfae8c-f332-452d-8ac1-6bf29d7e171f", "row_index": 140, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efdfae8c-f332-452d-8ac1-6bf29d7e171f", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b12e6c1-9c3e-4b53-ae5a-579588d77956", "record_id": "flaws_cloudtrail:0000141:1b12e6c1-9c3e-4b53-ae5a-579588d77956", "row_index": 141, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b12e6c1-9c3e-4b53-ae5a-579588d77956", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2d6c197-a501-4a8a-95b7-979e4f39535d", "record_id": "flaws_cloudtrail:0000142:c2d6c197-a501-4a8a-95b7-979e4f39535d", "row_index": 142, "timestamp": "2019-06-06T11:32:09Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2d6c197-a501-4a8a-95b7-979e4f39535d", "eventTime": "2019-06-06T11:32:09Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d070a1b1-e055-44cf-b2eb-6dd8331766a7", "record_id": "flaws_cloudtrail:0000143:d070a1b1-e055-44cf-b2eb-6dd8331766a7", "row_index": 143, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d070a1b1-e055-44cf-b2eb-6dd8331766a7", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c18168-0dea-42a9-92fd-e8d59c221fdd", "record_id": "flaws_cloudtrail:0000144:c18168-0dea-42a9-92fd-e8d59c221fdd", "row_index": 144, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c18168-0dea-42a9-92fd-e8d59c221fdd", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cce8bff-67a7-47c2-9be4-9b99e876affd", "record_id": "flaws_cloudtrail:0000145:1cce8bff-67a7-47c2-9be4-9b99e876affd", "row_index": 145, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cce8bff-67a7-47c2-9be4-9b99e876affd", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c067a48-4f92-429e-b11b-2a24432c91d3", "record_id": "flaws_cloudtrail:0000146:5c067a48-4f92-429e-b11b-2a24432c91d3", "row_index": 146, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c067a48-4f92-429e-b11b-2a24432c91d3", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc7c4118-611e-455b-8627-0b7b58ac44b2", "record_id": "flaws_cloudtrail:0000147:fc7c4118-611e-455b-8627-0b7b58ac44b2", "row_index": 147, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc7c4118-611e-455b-8627-0b7b58ac44b2", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2c032881-1d95-4005-adc9-757dee1583c8", "record_id": "flaws_cloudtrail:0000148:c2c032881-1d95-4005-adc9-757dee1583c8", "row_index": 148, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2c032881-1d95-4005-adc9-757dee1583c8", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53669-d468-4e00-8bd7-207319cecce0f", "record_id": "flaws_cloudtrail:0000149:53669-d468-4e00-8bd7-207319cecce0f", "row_index": 149, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53669-d468-4e00-8bd7-207319cecce0f", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8551c20-787c-4ce0-bde0-eb12c86ba20b", "record_id": "flaws_cloudtrail:0000150:b8551c20-787c-4ce0-bde0-eb12c86ba20b", "row_index": 150, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8551c20-787c-4ce0-bde0-eb12c86ba20b", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43242c67-52a3-4603-b37a-5ee19981ebe0", "record_id": "flaws_cloudtrail:0000151:43242c67-52a3-4603-b37a-5ee19981ebe0", "row_index": 151, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43242c67-52a3-4603-b37a-5ee19981ebe0", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb54e5b6-03f2-4249-b5b6-048e682aa4be", "record_id": "flaws_cloudtrail:0000152:eb54e5b6-03f2-4249-b5b6-048e682aa4be", "row_index": 152, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb54e5b6-03f2-4249-b5b6-048e682aa4be", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d070a1b1-e055-44cf-b2eb-6dd8331766a7", "record_id": "flaws_cloudtrail:0000153:d070a1b1-e055-44cf-b2eb-6dd8331766a7", "row_index": 153, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d070a1b1-e055-44cf-b2eb-6dd8331766a7", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c18168-0dea-42a9-92fd-e8d59c221fdd", "record_id": "flaws_cloudtrail:0000154:c18168-0dea-42a9-92fd-e8d59c221fdd", "row_index": 154, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c18168-0dea-42a9-92fd-e8d59c221fdd", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cce8bff-67a7-47c2-9be4-9b99e876affd", "record_id": "flaws_cloudtrail:0000155:1cce8bff-67a7-47c2-9be4-9b99e876affd", "row_index": 155, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cce8bff-67a7-47c2-9be4-9b99e876affd", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c067a48-4f92-429e-b11b-2a24432c91d3", "record_id": "flaws_cloudtrail:0000156:5c067a48-4f92-429e-b11b-2a24432c91d3", "row_index": 156, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c067a48-4f92-429e-b11b-2a24432c91d3", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc7c4118-611e-455b-8627-0b7b58ac44b2", "record_id": "flaws_cloudtrail:0000157:fc7c4118-611e-455b-8627-0b7b58ac44b2", "row_index": 157, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc7c4118-611e-455b-8627-0b7b58ac44b2", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2c032881-1d95-4005-adc9-757dee1583c8", "record_id": "flaws_cloudtrail:0000158:c2c032881-1d95-4005-adc9-757dee1583c8", "row_index": 158, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2c032881-1d95-4005-adc9-757dee1583c8", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53669-d468-4e00-8bd7-207319cecce0f", "record_id": "flaws_cloudtrail:0000159:53669-d468-4e00-8bd7-207319cecce0f", "row_index": 159, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53669-d468-4e00-8bd7-207319cecce0f", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8551c20-787c-4ce0-bde0-eb12c86ba20b", "record_id": "flaws_cloudtrail:0000160:b8551c20-787c-4ce0-bde0-eb12c86ba20b", "row_index": 160, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8551c20-787c-4ce0-bde0-eb12c86ba20b", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43242c67-52a3-4603-b37a-5ee19981ebe0", "record_id": "flaws_cloudtrail:0000161:43242c67-52a3-4603-b37a-5ee19981ebe0", "row_index": 161, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43242c67-52a3-4603-b37a-5ee19981ebe0", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb54e5b6-03f2-4249-b5b6-048e682aa4be", "record_id": "flaws_cloudtrail:0000162:eb54e5b6-03f2-4249-b5b6-048e682aa4be", "row_index": 162, "timestamp": "2019-06-06T11:32:10Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb54e5b6-03f2-4249-b5b6-048e682aa4be", "eventTime": "2019-06-06T11:32:10Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ec738659-6c22-4501-b2ac-2dd2c24d7008", "record_id": "flaws_cloudtrail:0000163:6ec738659-6c22-4501-b2ac-2dd2c24d7008", "row_index": 163, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ec738659-6c22-4501-b2ac-2dd2c24d7008", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38ea3854-885b-4314-8df6-65b078cafa35", "record_id": "flaws_cloudtrail:0000164:38ea3854-885b-4314-8df6-65b078cafa35", "row_index": 164, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38ea3854-885b-4314-8df6-65b078cafa35", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1b31d62-975a-4e47-8b09-2e253befc95e", "record_id": "flaws_cloudtrail:0000165:b1b31d62-975a-4e47-8b09-2e253befc95e", "row_index": 165, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1b31d62-975a-4e47-8b09-2e253befc95e", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf633469-94b4-4888-851b-4c96c8da5a45", "record_id": "flaws_cloudtrail:0000166:cf633469-94b4-4888-851b-4c96c8da5a45", "row_index": 166, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf633469-94b4-4888-851b-4c96c8da5a45", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83adf860-3ec3-44b5-87c3-cc5329fcf41d", "record_id": "flaws_cloudtrail:0000167:83adf860-3ec3-44b5-87c3-cc5329fcf41d", "row_index": 167, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83adf860-3ec3-44b5-87c3-cc5329fcf41d", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0b7d896-479c-4c6b-8578-122b12b59045", "record_id": "flaws_cloudtrail:0000168:b0b7d896-479c-4c6b-8578-122b12b59045", "row_index": 168, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0b7d896-479c-4c6b-8578-122b12b59045", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df71a701-3705-484d-a35d-0ac540991012", "record_id": "flaws_cloudtrail:0000169:df71a701-3705-484d-a35d-0ac540991012", "row_index": 169, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df71a701-3705-484d-a35d-0ac540991012", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3437cea9-8f31-4157-a59c-22b2807d784f", "record_id": "flaws_cloudtrail:0000170:3437cea9-8f31-4157-a59c-22b2807d784f", "row_index": 170, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3437cea9-8f31-4157-a59c-22b2807d784f", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5b1e31a-ff6f-4cbd-a6e0-d1a857b1febc", "record_id": "flaws_cloudtrail:0000171:c5b1e31a-ff6f-4cbd-a6e0-d1a857b1febc", "row_index": 171, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5b1e31a-ff6f-4cbd-a6e0-d1a857b1febc", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f404cadb-a5c0-42b6-a7fc-3d5d96d02068", "record_id": "flaws_cloudtrail:0000172:f404cadb-a5c0-42b6-a7fc-3d5d96d02068", "row_index": 172, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f404cadb-a5c0-42b6-a7fc-3d5d96d02068", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5edf52c9-0913-43c8-8939-995ed5525b0a", "record_id": "flaws_cloudtrail:0000173:5edf52c9-0913-43c8-8939-995ed5525b0a", "row_index": 173, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5edf52c9-0913-43c8-8939-995ed5525b0a", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7db6c2f-4174-4c2c-96eb-62ead65d0840", "record_id": "flaws_cloudtrail:0000174:e7db6c2f-4174-4c2c-96eb-62ead65d0840", "row_index": 174, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7db6c2f-4174-4c2c-96eb-62ead65d0840", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ec738659-6c22-4501-b2ac-2dd2c24d7008", "record_id": "flaws_cloudtrail:0000175:6ec738659-6c22-4501-b2ac-2dd2c24d7008", "row_index": 175, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ec738659-6c22-4501-b2ac-2dd2c24d7008", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38ea3854-885b-4314-8df6-65b078cafa35", "record_id": "flaws_cloudtrail:0000176:38ea3854-885b-4314-8df6-65b078cafa35", "row_index": 176, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38ea3854-885b-4314-8df6-65b078cafa35", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1b31d62-975a-4e47-8b09-2e253befc95e", "record_id": "flaws_cloudtrail:0000177:b1b31d62-975a-4e47-8b09-2e253befc95e", "row_index": 177, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1b31d62-975a-4e47-8b09-2e253befc95e", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf633469-94b4-4888-851b-4c96c8da5a45", "record_id": "flaws_cloudtrail:0000178:cf633469-94b4-4888-851b-4c96c8da5a45", "row_index": 178, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf633469-94b4-4888-851b-4c96c8da5a45", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83adf860-3ec3-44b5-87c3-cc5329fcf41d", "record_id": "flaws_cloudtrail:0000179:83adf860-3ec3-44b5-87c3-cc5329fcf41d", "row_index": 179, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83adf860-3ec3-44b5-87c3-cc5329fcf41d", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0b7d896-479c-4c6b-8578-122b12b59045", "record_id": "flaws_cloudtrail:0000180:b0b7d896-479c-4c6b-8578-122b12b59045", "row_index": 180, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0b7d896-479c-4c6b-8578-122b12b59045", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df71a701-3705-484d-a35d-0ac540991012", "record_id": "flaws_cloudtrail:0000181:df71a701-3705-484d-a35d-0ac540991012", "row_index": 181, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df71a701-3705-484d-a35d-0ac540991012", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3437cea9-8f31-4157-a59c-22b2807d784f", "record_id": "flaws_cloudtrail:0000182:3437cea9-8f31-4157-a59c-22b2807d784f", "row_index": 182, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3437cea9-8f31-4157-a59c-22b2807d784f", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5b1e31a-ff6f-4cbd-a6e0-d1a857b1febc", "record_id": "flaws_cloudtrail:0000183:c5b1e31a-ff6f-4cbd-a6e0-d1a857b1febc", "row_index": 183, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5b1e31a-ff6f-4cbd-a6e0-d1a857b1febc", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f404cadb-a5c0-42b6-a7fc-3d5d96d02068", "record_id": "flaws_cloudtrail:0000184:f404cadb-a5c0-42b6-a7fc-3d5d96d02068", "row_index": 184, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f404cadb-a5c0-42b6-a7fc-3d5d96d02068", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5edf52c9-0913-43c8-8939-995ed5525b0a", "record_id": "flaws_cloudtrail:0000185:5edf52c9-0913-43c8-8939-995ed5525b0a", "row_index": 185, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5edf52c9-0913-43c8-8939-995ed5525b0a", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7db6c2f-4174-4c2c-96eb-62ead65d0840", "record_id": "flaws_cloudtrail:0000186:e7db6c2f-4174-4c2c-96eb-62ead65d0840", "row_index": 186, "timestamp": "2019-06-06T11:32:11Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7db6c2f-4174-4c2c-96eb-62ead65d0840", "eventTime": "2019-06-06T11:32:11Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c344beb-a739-4fc3-8955-a4781e476ca5", "record_id": "flaws_cloudtrail:0000187:3c344beb-a739-4fc3-8955-a4781e476ca5", "row_index": 187, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c344beb-a739-4fc3-8955-a4781e476ca5", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46cbe93d-17dc-4991-af83-8e3e0b86ba07", "record_id": "flaws_cloudtrail:0000188:46cbe93d-17dc-4991-af83-8e3e0b86ba07", "row_index": 188, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46cbe93d-17dc-4991-af83-8e3e0b86ba07", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "631b59a9-bc80-4aa6-89bf-bbbfec966a77", "record_id": "flaws_cloudtrail:0000189:631b59a9-bc80-4aa6-89bf-bbbfec966a77", "row_index": 189, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "631b59a9-bc80-4aa6-89bf-bbbfec966a77", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a490e256-407a-4c20-be19-5673bbb0dce5", "record_id": "flaws_cloudtrail:0000190:a490e256-407a-4c20-be19-5673bbb0dce5", "row_index": 190, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a490e256-407a-4c20-be19-5673bbb0dce5", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "145187f26-5ab4-4a04-ba46-513a3b84d6c0", "record_id": "flaws_cloudtrail:0000191:145187f26-5ab4-4a04-ba46-513a3b84d6c0", "row_index": 191, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "145187f26-5ab4-4a04-ba46-513a3b84d6c0", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "647318-2d57-41e6-8d8e-73ee74ea5504", "record_id": "flaws_cloudtrail:0000192:647318-2d57-41e6-8d8e-73ee74ea5504", "row_index": 192, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "647318-2d57-41e6-8d8e-73ee74ea5504", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ab6b11c-5f6f-48ab-b3e6-d6a523dbe8d9", "record_id": "flaws_cloudtrail:0000193:5ab6b11c-5f6f-48ab-b3e6-d6a523dbe8d9", "row_index": 193, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ab6b11c-5f6f-48ab-b3e6-d6a523dbe8d9", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6f816b2-3164-4158-b094-b442441ac8d10", "record_id": "flaws_cloudtrail:0000194:b6f816b2-3164-4158-b094-b442441ac8d10", "row_index": 194, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6f816b2-3164-4158-b094-b442441ac8d10", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "804c0afa-bbf5-4235-be32-d7ea33ba905b", "record_id": "flaws_cloudtrail:0000195:804c0afa-bbf5-4235-be32-d7ea33ba905b", "row_index": 195, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "804c0afa-bbf5-4235-be32-d7ea33ba905b", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f35c621-15cc-4efa-ae26-543463ec2de", "record_id": "flaws_cloudtrail:0000196:7f35c621-15cc-4efa-ae26-543463ec2de", "row_index": 196, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f35c621-15cc-4efa-ae26-543463ec2de", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8194fd9-0ce7-4ad9-a780-13fc76befce0", "record_id": "flaws_cloudtrail:0000197:b8194fd9-0ce7-4ad9-a780-13fc76befce0", "row_index": 197, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8194fd9-0ce7-4ad9-a780-13fc76befce0", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3865af67-fef0-46f7-9f37-bf5f48c40289", "record_id": "flaws_cloudtrail:0000198:3865af67-fef0-46f7-9f37-bf5f48c40289", "row_index": 198, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3865af67-fef0-46f7-9f37-bf5f48c40289", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "615b7e7f-4c13-4251-9d69-6fe2fc203cce", "record_id": "flaws_cloudtrail:0000199:615b7e7f-4c13-4251-9d69-6fe2fc203cce", "row_index": 199, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "615b7e7f-4c13-4251-9d69-6fe2fc203cce", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bf00e4a-23ed-485b-b7ca-44e7e07993fa", "record_id": "flaws_cloudtrail:0000200:6bf00e4a-23ed-485b-b7ca-44e7e07993fa", "row_index": 200, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bf00e4a-23ed-485b-b7ca-44e7e07993fa", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00494-ce68-4d2a-bab1-63568c33f6", "record_id": "flaws_cloudtrail:0000201:00494-ce68-4d2a-bab1-63568c33f6", "row_index": 201, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00494-ce68-4d2a-bab1-63568c33f6", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51202-1ec9-4d8a-b22a-36039623eda8", "record_id": "flaws_cloudtrail:0000202:51202-1ec9-4d8a-b22a-36039623eda8", "row_index": 202, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51202-1ec9-4d8a-b22a-36039623eda8", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e14da719-e4cd-4c60-ba8d-7ae50c981ce5", "record_id": "flaws_cloudtrail:0000203:e14da719-e4cd-4c60-ba8d-7ae50c981ce5", "row_index": 203, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e14da719-e4cd-4c60-ba8d-7ae50c981ce5", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee22b688-b2fb-4093-9ac1-10e5e7b314043", "record_id": "flaws_cloudtrail:0000204:ee22b688-b2fb-4093-9ac1-10e5e7b314043", "row_index": 204, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee22b688-b2fb-4093-9ac1-10e5e7b314043", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fed50d1-0180-42df-9329-a484159a3f9a", "record_id": "flaws_cloudtrail:0000205:5fed50d1-0180-42df-9329-a484159a3f9a", "row_index": 205, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fed50d1-0180-42df-9329-a484159a3f9a", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75f9892d-35ec-4873-97b5-f8dfd720656", "record_id": "flaws_cloudtrail:0000206:75f9892d-35ec-4873-97b5-f8dfd720656", "row_index": 206, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75f9892d-35ec-4873-97b5-f8dfd720656", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c9430c7-a31b-4826-bdea-00b296f833f5", "record_id": "flaws_cloudtrail:0000207:7c9430c7-a31b-4826-bdea-00b296f833f5", "row_index": 207, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c9430c7-a31b-4826-bdea-00b296f833f5", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2606f3b3-ee34-4dd2-b043-dbba7f497f11", "record_id": "flaws_cloudtrail:0000208:2606f3b3-ee34-4dd2-b043-dbba7f497f11", "row_index": 208, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2606f3b3-ee34-4dd2-b043-dbba7f497f11", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c344beb-a739-4fc3-8955-a4781e476ca5", "record_id": "flaws_cloudtrail:0000209:3c344beb-a739-4fc3-8955-a4781e476ca5", "row_index": 209, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c344beb-a739-4fc3-8955-a4781e476ca5", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46cbe93d-17dc-4991-af83-8e3e0b86ba07", "record_id": "flaws_cloudtrail:0000210:46cbe93d-17dc-4991-af83-8e3e0b86ba07", "row_index": 210, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46cbe93d-17dc-4991-af83-8e3e0b86ba07", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "631b59a9-bc80-4aa6-89bf-bbbfec966a77", "record_id": "flaws_cloudtrail:0000211:631b59a9-bc80-4aa6-89bf-bbbfec966a77", "row_index": 211, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "631b59a9-bc80-4aa6-89bf-bbbfec966a77", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a490e256-407a-4c20-be19-5673bbb0dce5", "record_id": "flaws_cloudtrail:0000212:a490e256-407a-4c20-be19-5673bbb0dce5", "row_index": 212, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a490e256-407a-4c20-be19-5673bbb0dce5", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "145187f26-5ab4-4a04-ba46-513a3b84d6c0", "record_id": "flaws_cloudtrail:0000213:145187f26-5ab4-4a04-ba46-513a3b84d6c0", "row_index": 213, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "145187f26-5ab4-4a04-ba46-513a3b84d6c0", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "647318-2d57-41e6-8d8e-73ee74ea5504", "record_id": "flaws_cloudtrail:0000214:647318-2d57-41e6-8d8e-73ee74ea5504", "row_index": 214, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "647318-2d57-41e6-8d8e-73ee74ea5504", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ab6b11c-5f6f-48ab-b3e6-d6a523dbe8d9", "record_id": "flaws_cloudtrail:0000215:5ab6b11c-5f6f-48ab-b3e6-d6a523dbe8d9", "row_index": 215, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ab6b11c-5f6f-48ab-b3e6-d6a523dbe8d9", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6f816b2-3164-4158-b094-b442441ac8d10", "record_id": "flaws_cloudtrail:0000216:b6f816b2-3164-4158-b094-b442441ac8d10", "row_index": 216, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6f816b2-3164-4158-b094-b442441ac8d10", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "804c0afa-bbf5-4235-be32-d7ea33ba905b", "record_id": "flaws_cloudtrail:0000217:804c0afa-bbf5-4235-be32-d7ea33ba905b", "row_index": 217, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "804c0afa-bbf5-4235-be32-d7ea33ba905b", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f35c621-15cc-4efa-ae26-543463ec2de", "record_id": "flaws_cloudtrail:0000218:7f35c621-15cc-4efa-ae26-543463ec2de", "row_index": 218, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f35c621-15cc-4efa-ae26-543463ec2de", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8194fd9-0ce7-4ad9-a780-13fc76befce0", "record_id": "flaws_cloudtrail:0000219:b8194fd9-0ce7-4ad9-a780-13fc76befce0", "row_index": 219, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8194fd9-0ce7-4ad9-a780-13fc76befce0", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3865af67-fef0-46f7-9f37-bf5f48c40289", "record_id": "flaws_cloudtrail:0000220:3865af67-fef0-46f7-9f37-bf5f48c40289", "row_index": 220, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3865af67-fef0-46f7-9f37-bf5f48c40289", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "615b7e7f-4c13-4251-9d69-6fe2fc203cce", "record_id": "flaws_cloudtrail:0000221:615b7e7f-4c13-4251-9d69-6fe2fc203cce", "row_index": 221, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "615b7e7f-4c13-4251-9d69-6fe2fc203cce", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bf00e4a-23ed-485b-b7ca-44e7e07993fa", "record_id": "flaws_cloudtrail:0000222:6bf00e4a-23ed-485b-b7ca-44e7e07993fa", "row_index": 222, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bf00e4a-23ed-485b-b7ca-44e7e07993fa", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00494-ce68-4d2a-bab1-63568c33f6", "record_id": "flaws_cloudtrail:0000223:00494-ce68-4d2a-bab1-63568c33f6", "row_index": 223, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00494-ce68-4d2a-bab1-63568c33f6", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51202-1ec9-4d8a-b22a-36039623eda8", "record_id": "flaws_cloudtrail:0000224:51202-1ec9-4d8a-b22a-36039623eda8", "row_index": 224, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51202-1ec9-4d8a-b22a-36039623eda8", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e14da719-e4cd-4c60-ba8d-7ae50c981ce5", "record_id": "flaws_cloudtrail:0000225:e14da719-e4cd-4c60-ba8d-7ae50c981ce5", "row_index": 225, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e14da719-e4cd-4c60-ba8d-7ae50c981ce5", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee22b688-b2fb-4093-9ac1-10e5e7b314043", "record_id": "flaws_cloudtrail:0000226:ee22b688-b2fb-4093-9ac1-10e5e7b314043", "row_index": 226, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee22b688-b2fb-4093-9ac1-10e5e7b314043", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fed50d1-0180-42df-9329-a484159a3f9a", "record_id": "flaws_cloudtrail:0000227:5fed50d1-0180-42df-9329-a484159a3f9a", "row_index": 227, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fed50d1-0180-42df-9329-a484159a3f9a", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75f9892d-35ec-4873-97b5-f8dfd720656", "record_id": "flaws_cloudtrail:0000228:75f9892d-35ec-4873-97b5-f8dfd720656", "row_index": 228, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75f9892d-35ec-4873-97b5-f8dfd720656", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c9430c7-a31b-4826-bdea-00b296f833f5", "record_id": "flaws_cloudtrail:0000229:7c9430c7-a31b-4826-bdea-00b296f833f5", "row_index": 229, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c9430c7-a31b-4826-bdea-00b296f833f5", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2606f3b3-ee34-4dd2-b043-dbba7f497f11", "record_id": "flaws_cloudtrail:0000230:2606f3b3-ee34-4dd2-b043-dbba7f497f11", "row_index": 230, "timestamp": "2019-06-06T11:32:12Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2606f3b3-ee34-4dd2-b043-dbba7f497f11", "eventTime": "2019-06-06T11:32:12Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3560f4ff-5abe-4a6d-9e69-db8ab04756", "record_id": "flaws_cloudtrail:0000231:3560f4ff-5abe-4a6d-9e69-db8ab04756", "row_index": 231, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3560f4ff-5abe-4a6d-9e69-db8ab04756", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2f07eb4-82ca-41e1-9f21-b23a0c0415d2", "record_id": "flaws_cloudtrail:0000232:d2f07eb4-82ca-41e1-9f21-b23a0c0415d2", "row_index": 232, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2f07eb4-82ca-41e1-9f21-b23a0c0415d2", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f78e866-0b37-4ac2-ae28-4f80e04d92bb", "record_id": "flaws_cloudtrail:0000233:4f78e866-0b37-4ac2-ae28-4f80e04d92bb", "row_index": 233, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f78e866-0b37-4ac2-ae28-4f80e04d92bb", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4df73ef0-0fc5-4fdb-a81c-241c0e2db009", "record_id": "flaws_cloudtrail:0000234:4df73ef0-0fc5-4fdb-a81c-241c0e2db009", "row_index": 234, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4df73ef0-0fc5-4fdb-a81c-241c0e2db009", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac6bd6e1-de21-4d0c-9361-dd59ef3bc79e", "record_id": "flaws_cloudtrail:0000235:ac6bd6e1-de21-4d0c-9361-dd59ef3bc79e", "row_index": 235, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac6bd6e1-de21-4d0c-9361-dd59ef3bc79e", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1914a984-113a-4e17-890f-3890466bf5d4", "record_id": "flaws_cloudtrail:0000236:1914a984-113a-4e17-890f-3890466bf5d4", "row_index": 236, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1914a984-113a-4e17-890f-3890466bf5d4", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6916c992-78b3-428e-9b72-11d0e27b730c", "record_id": "flaws_cloudtrail:0000237:6916c992-78b3-428e-9b72-11d0e27b730c", "row_index": 237, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6916c992-78b3-428e-9b72-11d0e27b730c", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fb73ce8-b143-456a-9c65-ce03d4cc6142", "record_id": "flaws_cloudtrail:0000238:0fb73ce8-b143-456a-9c65-ce03d4cc6142", "row_index": 238, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fb73ce8-b143-456a-9c65-ce03d4cc6142", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "236c5449-c5ad-459a-8075-9389ea7027f4", "record_id": "flaws_cloudtrail:0000239:236c5449-c5ad-459a-8075-9389ea7027f4", "row_index": 239, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "236c5449-c5ad-459a-8075-9389ea7027f4", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03a46c75-8286-4acc-b052-335e3e34120f", "record_id": "flaws_cloudtrail:0000240:03a46c75-8286-4acc-b052-335e3e34120f", "row_index": 240, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03a46c75-8286-4acc-b052-335e3e34120f", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2bd8cd4-6bc4-463b-8877-d23c7af36db7", "record_id": "flaws_cloudtrail:0000241:b2bd8cd4-6bc4-463b-8877-d23c7af36db7", "row_index": 241, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2bd8cd4-6bc4-463b-8877-d23c7af36db7", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35eff059-e45f-4380-bdf9-7d997f33d3aa", "record_id": "flaws_cloudtrail:0000242:35eff059-e45f-4380-bdf9-7d997f33d3aa", "row_index": 242, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35eff059-e45f-4380-bdf9-7d997f33d3aa", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f47f3d50-7321-40ba-9346-74d696fc1f0d", "record_id": "flaws_cloudtrail:0000243:f47f3d50-7321-40ba-9346-74d696fc1f0d", "row_index": 243, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f47f3d50-7321-40ba-9346-74d696fc1f0d", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e75e365-7b46-47d6-abb3-e8c321bdaf20", "record_id": "flaws_cloudtrail:0000244:8e75e365-7b46-47d6-abb3-e8c321bdaf20", "row_index": 244, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e75e365-7b46-47d6-abb3-e8c321bdaf20", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df54a8fc-1bfa-49e6-93e5-8f58d4dd685f", "record_id": "flaws_cloudtrail:0000245:df54a8fc-1bfa-49e6-93e5-8f58d4dd685f", "row_index": 245, "timestamp": "2019-06-06T11:32:13Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df54a8fc-1bfa-49e6-93e5-8f58d4dd685f", "eventTime": "2019-06-06T11:32:13Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b9909c9-07e9-49ff-9271-928a1a19637e", "record_id": "flaws_cloudtrail:0000246:4b9909c9-07e9-49ff-9271-928a1a19637e", "row_index": 246, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b9909c9-07e9-49ff-9271-928a1a19637e", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b95f480d-3749-424c-8736-b04bb32859e", "record_id": "flaws_cloudtrail:0000247:b95f480d-3749-424c-8736-b04bb32859e", "row_index": 247, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b95f480d-3749-424c-8736-b04bb32859e", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d95f98b3-b3ae-41bf-8553-d7499dd17809", "record_id": "flaws_cloudtrail:0000248:d95f98b3-b3ae-41bf-8553-d7499dd17809", "row_index": 248, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d95f98b3-b3ae-41bf-8553-d7499dd17809", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89292dc4-e156-44f9-96c0-307169dab1b15", "record_id": "flaws_cloudtrail:0000249:89292dc4-e156-44f9-96c0-307169dab1b15", "row_index": 249, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89292dc4-e156-44f9-96c0-307169dab1b15", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b38b1abd-fca1-403c-a2ab-bdaae97f535c", "record_id": "flaws_cloudtrail:0000250:b38b1abd-fca1-403c-a2ab-bdaae97f535c", "row_index": 250, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b38b1abd-fca1-403c-a2ab-bdaae97f535c", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bdc531f-4f02-4bd8-a868-b73eee154742", "record_id": "flaws_cloudtrail:0000251:7bdc531f-4f02-4bd8-a868-b73eee154742", "row_index": 251, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bdc531f-4f02-4bd8-a868-b73eee154742", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36d9af8e-ef6c-45bf-be87-3cfdf8e65952", "record_id": "flaws_cloudtrail:0000252:36d9af8e-ef6c-45bf-be87-3cfdf8e65952", "row_index": 252, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36d9af8e-ef6c-45bf-be87-3cfdf8e65952", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instanceId": "i-aa2d3b42e5c6e801a", "attribute": "userData"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb91f38f-052a-450f-a33b-f8626c70e4fd", "record_id": "flaws_cloudtrail:0000253:eb91f38f-052a-450f-a33b-f8626c70e4fd", "row_index": 253, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb91f38f-052a-450f-a33b-f8626c70e4fd", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5881d0e2-5bd7-4166-a59b-b86a5694168f", "record_id": "flaws_cloudtrail:0000254:5881d0e2-5bd7-4166-a59b-b86a5694168f", "row_index": 254, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5881d0e2-5bd7-4166-a59b-b86a5694168f", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3560f4ff-5abe-4a6d-9e69-db8ab04756", "record_id": "flaws_cloudtrail:0000255:3560f4ff-5abe-4a6d-9e69-db8ab04756", "row_index": 255, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3560f4ff-5abe-4a6d-9e69-db8ab04756", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2f07eb4-82ca-41e1-9f21-b23a0c0415d2", "record_id": "flaws_cloudtrail:0000256:d2f07eb4-82ca-41e1-9f21-b23a0c0415d2", "row_index": 256, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2f07eb4-82ca-41e1-9f21-b23a0c0415d2", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f78e866-0b37-4ac2-ae28-4f80e04d92bb", "record_id": "flaws_cloudtrail:0000257:4f78e866-0b37-4ac2-ae28-4f80e04d92bb", "row_index": 257, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f78e866-0b37-4ac2-ae28-4f80e04d92bb", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4df73ef0-0fc5-4fdb-a81c-241c0e2db009", "record_id": "flaws_cloudtrail:0000258:4df73ef0-0fc5-4fdb-a81c-241c0e2db009", "row_index": 258, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4df73ef0-0fc5-4fdb-a81c-241c0e2db009", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac6bd6e1-de21-4d0c-9361-dd59ef3bc79e", "record_id": "flaws_cloudtrail:0000259:ac6bd6e1-de21-4d0c-9361-dd59ef3bc79e", "row_index": 259, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac6bd6e1-de21-4d0c-9361-dd59ef3bc79e", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1914a984-113a-4e17-890f-3890466bf5d4", "record_id": "flaws_cloudtrail:0000260:1914a984-113a-4e17-890f-3890466bf5d4", "row_index": 260, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1914a984-113a-4e17-890f-3890466bf5d4", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6916c992-78b3-428e-9b72-11d0e27b730c", "record_id": "flaws_cloudtrail:0000261:6916c992-78b3-428e-9b72-11d0e27b730c", "row_index": 261, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6916c992-78b3-428e-9b72-11d0e27b730c", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fb73ce8-b143-456a-9c65-ce03d4cc6142", "record_id": "flaws_cloudtrail:0000262:0fb73ce8-b143-456a-9c65-ce03d4cc6142", "row_index": 262, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fb73ce8-b143-456a-9c65-ce03d4cc6142", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "236c5449-c5ad-459a-8075-9389ea7027f4", "record_id": "flaws_cloudtrail:0000263:236c5449-c5ad-459a-8075-9389ea7027f4", "row_index": 263, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "236c5449-c5ad-459a-8075-9389ea7027f4", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03a46c75-8286-4acc-b052-335e3e34120f", "record_id": "flaws_cloudtrail:0000264:03a46c75-8286-4acc-b052-335e3e34120f", "row_index": 264, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03a46c75-8286-4acc-b052-335e3e34120f", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2bd8cd4-6bc4-463b-8877-d23c7af36db7", "record_id": "flaws_cloudtrail:0000265:b2bd8cd4-6bc4-463b-8877-d23c7af36db7", "row_index": 265, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2bd8cd4-6bc4-463b-8877-d23c7af36db7", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35eff059-e45f-4380-bdf9-7d997f33d3aa", "record_id": "flaws_cloudtrail:0000266:35eff059-e45f-4380-bdf9-7d997f33d3aa", "row_index": 266, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35eff059-e45f-4380-bdf9-7d997f33d3aa", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f47f3d50-7321-40ba-9346-74d696fc1f0d", "record_id": "flaws_cloudtrail:0000267:f47f3d50-7321-40ba-9346-74d696fc1f0d", "row_index": 267, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f47f3d50-7321-40ba-9346-74d696fc1f0d", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e75e365-7b46-47d6-abb3-e8c321bdaf20", "record_id": "flaws_cloudtrail:0000268:8e75e365-7b46-47d6-abb3-e8c321bdaf20", "row_index": 268, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e75e365-7b46-47d6-abb3-e8c321bdaf20", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df54a8fc-1bfa-49e6-93e5-8f58d4dd685f", "record_id": "flaws_cloudtrail:0000269:df54a8fc-1bfa-49e6-93e5-8f58d4dd685f", "row_index": 269, "timestamp": "2019-06-06T11:32:13Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df54a8fc-1bfa-49e6-93e5-8f58d4dd685f", "eventTime": "2019-06-06T11:32:13Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b9909c9-07e9-49ff-9271-928a1a19637e", "record_id": "flaws_cloudtrail:0000270:4b9909c9-07e9-49ff-9271-928a1a19637e", "row_index": 270, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b9909c9-07e9-49ff-9271-928a1a19637e", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b95f480d-3749-424c-8736-b04bb32859e", "record_id": "flaws_cloudtrail:0000271:b95f480d-3749-424c-8736-b04bb32859e", "row_index": 271, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b95f480d-3749-424c-8736-b04bb32859e", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d95f98b3-b3ae-41bf-8553-d7499dd17809", "record_id": "flaws_cloudtrail:0000272:d95f98b3-b3ae-41bf-8553-d7499dd17809", "row_index": 272, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d95f98b3-b3ae-41bf-8553-d7499dd17809", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89292dc4-e156-44f9-96c0-307169dab1b15", "record_id": "flaws_cloudtrail:0000273:89292dc4-e156-44f9-96c0-307169dab1b15", "row_index": 273, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89292dc4-e156-44f9-96c0-307169dab1b15", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b38b1abd-fca1-403c-a2ab-bdaae97f535c", "record_id": "flaws_cloudtrail:0000274:b38b1abd-fca1-403c-a2ab-bdaae97f535c", "row_index": 274, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b38b1abd-fca1-403c-a2ab-bdaae97f535c", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bdc531f-4f02-4bd8-a868-b73eee154742", "record_id": "flaws_cloudtrail:0000275:7bdc531f-4f02-4bd8-a868-b73eee154742", "row_index": 275, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bdc531f-4f02-4bd8-a868-b73eee154742", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36d9af8e-ef6c-45bf-be87-3cfdf8e65952", "record_id": "flaws_cloudtrail:0000276:36d9af8e-ef6c-45bf-be87-3cfdf8e65952", "row_index": 276, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36d9af8e-ef6c-45bf-be87-3cfdf8e65952", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instanceId": "i-aa2d3b42e5c6e801a", "attribute": "userData"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb91f38f-052a-450f-a33b-f8626c70e4fd", "record_id": "flaws_cloudtrail:0000277:eb91f38f-052a-450f-a33b-f8626c70e4fd", "row_index": 277, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb91f38f-052a-450f-a33b-f8626c70e4fd", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5881d0e2-5bd7-4166-a59b-b86a5694168f", "record_id": "flaws_cloudtrail:0000278:5881d0e2-5bd7-4166-a59b-b86a5694168f", "row_index": 278, "timestamp": "2019-06-06T11:32:13Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5881d0e2-5bd7-4166-a59b-b86a5694168f", "eventTime": "2019-06-06T11:32:13Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.155 Python/3.7.3 Linux/4.9.0-5-amd64 Botocore/1.12.155", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dea572e-1c92-4238-969f-6dbdb6f53ade", "record_id": "flaws_cloudtrail:0000279:3dea572e-1c92-4238-969f-6dbdb6f53ade", "row_index": 279, "timestamp": "2019-06-06T11:40:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dea572e-1c92-4238-969f-6dbdb6f53ade", "eventTime": "2019-06-06T11:40:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dea572e-1c92-4238-969f-6dbdb6f53ade", "record_id": "flaws_cloudtrail:0000280:3dea572e-1c92-4238-969f-6dbdb6f53ade", "row_index": 280, "timestamp": "2019-06-06T11:40:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dea572e-1c92-4238-969f-6dbdb6f53ade", "eventTime": "2019-06-06T11:40:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecaf15f7-a4ef-47dd-a8a4-a3cf456ef3f3", "record_id": "flaws_cloudtrail:0000281:ecaf15f7-a4ef-47dd-a8a4-a3cf456ef3f3", "row_index": 281, "timestamp": "2019-06-06T11:53:29Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecaf15f7-a4ef-47dd-a8a4-a3cf456ef3f3", "eventTime": "2019-06-06T11:53:29Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecaf15f7-a4ef-47dd-a8a4-a3cf456ef3f3", "record_id": "flaws_cloudtrail:0000282:ecaf15f7-a4ef-47dd-a8a4-a3cf456ef3f3", "row_index": 282, "timestamp": "2019-06-06T11:53:29Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecaf15f7-a4ef-47dd-a8a4-a3cf456ef3f3", "eventTime": "2019-06-06T11:53:29Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e7fbbc-439b-467d-afde-e80bf5c448a0", "record_id": "flaws_cloudtrail:0000283:23e7fbbc-439b-467d-afde-e80bf5c448a0", "row_index": 283, "timestamp": "2019-06-06T11:57:49Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e7fbbc-439b-467d-afde-e80bf5c448a0", "eventTime": "2019-06-06T11:57:49Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e7fbbc-439b-467d-afde-e80bf5c448a0", "record_id": "flaws_cloudtrail:0000284:23e7fbbc-439b-467d-afde-e80bf5c448a0", "row_index": 284, "timestamp": "2019-06-06T11:57:49Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e7fbbc-439b-467d-afde-e80bf5c448a0", "eventTime": "2019-06-06T11:57:49Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "917cdef5-826c-4675-9e71-dfe5a9b918f0", "record_id": "flaws_cloudtrail:0000285:917cdef5-826c-4675-9e71-dfe5a9b918f0", "row_index": 285, "timestamp": "2019-06-06T11:58:44Z", "event_type": "GetFunctionConfiguration202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "917cdef5-826c-4675-9e71-dfe5a9b918f0", "eventTime": "2019-06-06T11:58:44Z", "eventName": "GetFunctionConfiguration202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunctionConfiguration on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "917cdef5-826c-4675-9e71-dfe5a9b918f0", "record_id": "flaws_cloudtrail:0000286:917cdef5-826c-4675-9e71-dfe5a9b918f0", "row_index": 286, "timestamp": "2019-06-06T11:58:44Z", "event_type": "GetFunctionConfiguration202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 907, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "917cdef5-826c-4675-9e71-dfe5a9b918f0", "eventTime": "2019-06-06T11:58:44Z", "eventName": "GetFunctionConfiguration202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunctionConfiguration on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "933354-9cf2-4de4-b9fd-8b242588b425", "record_id": "flaws_cloudtrail:0000287:933354-9cf2-4de4-b9fd-8b242588b425", "row_index": 287, "timestamp": "2019-06-06T12:11:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.29.186.210", "user_agent": "aws-cli/1.16.161 Python/2.7.16 Linux/3.18.14-156973 botocore/1.12.151", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "933354-9cf2-4de4-b9fd-8b242588b425", "eventTime": "2019-06-06T12:11:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.29.186.210", "userAgent": "aws-cli/1.16.161 Python/2.7.16 Linux/3.18.14-156973 botocore/1.12.151", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "933354-9cf2-4de4-b9fd-8b242588b425", "record_id": "flaws_cloudtrail:0000288:933354-9cf2-4de4-b9fd-8b242588b425", "row_index": 288, "timestamp": "2019-06-06T12:11:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.29.186.210", "user_agent": "aws-cli/1.16.161 Python/2.7.16 Linux/3.18.14-156973 botocore/1.12.151", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "933354-9cf2-4de4-b9fd-8b242588b425", "eventTime": "2019-06-06T12:11:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.29.186.210", "userAgent": "aws-cli/1.16.161 Python/2.7.16 Linux/3.18.14-156973 botocore/1.12.151", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cb1d85f-4e60-42b8-9231-478e0dccaa0b", "record_id": "flaws_cloudtrail:0000289:9cb1d85f-4e60-42b8-9231-478e0dccaa0b", "row_index": 289, "timestamp": "2019-06-06T12:12:03Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.29.186.210", "user_agent": "aws-cli/1.16.161 Python/2.7.16 Linux/3.18.14-156973 botocore/1.12.151", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cb1d85f-4e60-42b8-9231-478e0dccaa0b", "eventTime": "2019-06-06T12:12:03Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.29.186.210", "userAgent": "aws-cli/1.16.161 Python/2.7.16 Linux/3.18.14-156973 botocore/1.12.151", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cb1d85f-4e60-42b8-9231-478e0dccaa0b", "record_id": "flaws_cloudtrail:0000290:9cb1d85f-4e60-42b8-9231-478e0dccaa0b", "row_index": 290, "timestamp": "2019-06-06T12:12:03Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.29.186.210", "user_agent": "aws-cli/1.16.161 Python/2.7.16 Linux/3.18.14-156973 botocore/1.12.151", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cb1d85f-4e60-42b8-9231-478e0dccaa0b", "eventTime": "2019-06-06T12:12:03Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.29.186.210", "userAgent": "aws-cli/1.16.161 Python/2.7.16 Linux/3.18.14-156973 botocore/1.12.151", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1269cd41-ee19-4344-8382-0eebc45f82be", "record_id": "flaws_cloudtrail:0000291:1269cd41-ee19-4344-8382-0eebc45f82be", "row_index": 291, "timestamp": "2019-06-06T12:13:01Z", "event_type": "CreateLaunchConfiguration", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.29.186.210", "user_agent": "aws-cli/1.16.161 Python/2.7.16 Linux/3.18.14-156973 botocore/1.12.151", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 957, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1269cd41-ee19-4344-8382-0eebc45f82be", "eventTime": "2019-06-06T12:13:01Z", "eventName": "CreateLaunchConfiguration", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.29.186.210", "userAgent": "aws-cli/1.16.161 Python/2.7.16 Linux/3.18.14-156973 botocore/1.12.151", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: autoscaling:CreateLaunchConfiguration on resource: arn:aws:autoscaling:us-east-2:811596193553:launchConfiguration:*:launchConfigurationName/se1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1269cd41-ee19-4344-8382-0eebc45f82be", "record_id": "flaws_cloudtrail:0000292:1269cd41-ee19-4344-8382-0eebc45f82be", "row_index": 292, "timestamp": "2019-06-06T12:13:01Z", "event_type": "CreateLaunchConfiguration", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.29.186.210", "user_agent": "aws-cli/1.16.161 Python/2.7.16 Linux/3.18.14-156973 botocore/1.12.151", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 957, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1269cd41-ee19-4344-8382-0eebc45f82be", "eventTime": "2019-06-06T12:13:01Z", "eventName": "CreateLaunchConfiguration", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.29.186.210", "userAgent": "aws-cli/1.16.161 Python/2.7.16 Linux/3.18.14-156973 botocore/1.12.151", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: autoscaling:CreateLaunchConfiguration on resource: arn:aws:autoscaling:us-east-2:811596193553:launchConfiguration:*:launchConfigurationName/se1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca920aa6-be4e-4914-8fe1-8da04286", "record_id": "flaws_cloudtrail:0000293:ca920aa6-be4e-4914-8fe1-8da04286", "row_index": 293, "timestamp": "2019-06-06T12:16:34Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca920aa6-be4e-4914-8fe1-8da04286", "eventTime": "2019-06-06T12:16:34Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca920aa6-be4e-4914-8fe1-8da04286", "record_id": "flaws_cloudtrail:0000294:ca920aa6-be4e-4914-8fe1-8da04286", "row_index": 294, "timestamp": "2019-06-06T12:16:34Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca920aa6-be4e-4914-8fe1-8da04286", "eventTime": "2019-06-06T12:16:34Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f33de58-a137-4d35-863e-cafe45ebfa45", "record_id": "flaws_cloudtrail:0000295:9f33de58-a137-4d35-863e-cafe45ebfa45", "row_index": 295, "timestamp": "2019-06-06T12:20:14Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f33de58-a137-4d35-863e-cafe45ebfa45", "eventTime": "2019-06-06T12:20:14Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f33de58-a137-4d35-863e-cafe45ebfa45", "record_id": "flaws_cloudtrail:0000296:9f33de58-a137-4d35-863e-cafe45ebfa45", "row_index": 296, "timestamp": "2019-06-06T12:20:14Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f33de58-a137-4d35-863e-cafe45ebfa45", "eventTime": "2019-06-06T12:20:14Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b013a6f-66e2-4862-ba9e-b6b6a0732615", "record_id": "flaws_cloudtrail:0000297:0b013a6f-66e2-4862-ba9e-b6b6a0732615", "row_index": 297, "timestamp": "2019-06-06T12:20:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b013a6f-66e2-4862-ba9e-b6b6a0732615", "eventTime": "2019-06-06T12:20:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b013a6f-66e2-4862-ba9e-b6b6a0732615", "record_id": "flaws_cloudtrail:0000298:0b013a6f-66e2-4862-ba9e-b6b6a0732615", "row_index": 298, "timestamp": "2019-06-06T12:20:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b013a6f-66e2-4862-ba9e-b6b6a0732615", "eventTime": "2019-06-06T12:20:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fafe1c45-2c9a-4b3b-ad44-6d916b4af0f0", "record_id": "flaws_cloudtrail:0000299:fafe1c45-2c9a-4b3b-ad44-6d916b4af0f0", "row_index": 299, "timestamp": "2019-06-06T12:21:12Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fafe1c45-2c9a-4b3b-ad44-6d916b4af0f0", "eventTime": "2019-06-06T12:21:12Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fafe1c45-2c9a-4b3b-ad44-6d916b4af0f0", "record_id": "flaws_cloudtrail:0000300:fafe1c45-2c9a-4b3b-ad44-6d916b4af0f0", "row_index": 300, "timestamp": "2019-06-06T12:21:12Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fafe1c45-2c9a-4b3b-ad44-6d916b4af0f0", "eventTime": "2019-06-06T12:21:12Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8dbab8f-e030-4e35-89b5-5a71096d71cf", "record_id": "flaws_cloudtrail:0000301:f8dbab8f-e030-4e35-89b5-5a71096d71cf", "row_index": 301, "timestamp": "2019-06-06T12:21:36Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8dbab8f-e030-4e35-89b5-5a71096d71cf", "eventTime": "2019-06-06T12:21:36Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8dbab8f-e030-4e35-89b5-5a71096d71cf", "record_id": "flaws_cloudtrail:0000302:f8dbab8f-e030-4e35-89b5-5a71096d71cf", "row_index": 302, "timestamp": "2019-06-06T12:21:36Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8dbab8f-e030-4e35-89b5-5a71096d71cf", "eventTime": "2019-06-06T12:21:36Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.47", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7bd8f37-c9d4-467c-af5c-f98d3e029038", "record_id": "flaws_cloudtrail:0000303:a7bd8f37-c9d4-467c-af5c-f98d3e029038", "row_index": 303, "timestamp": "2019-06-06T12:21:42Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7bd8f37-c9d4-467c-af5c-f98d3e029038", "eventTime": "2019-06-06T12:21:42Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7bd8f37-c9d4-467c-af5c-f98d3e029038", "record_id": "flaws_cloudtrail:0000304:a7bd8f37-c9d4-467c-af5c-f98d3e029038", "row_index": 304, "timestamp": "2019-06-06T12:21:42Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7bd8f37-c9d4-467c-af5c-f98d3e029038", "eventTime": "2019-06-06T12:21:42Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f06ae5cf-6297-4c8c-836f-ba5840125396", "record_id": "flaws_cloudtrail:0000305:f06ae5cf-6297-4c8c-836f-ba5840125396", "row_index": 305, "timestamp": "2019-06-06T12:21:57Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f06ae5cf-6297-4c8c-836f-ba5840125396", "eventTime": "2019-06-06T12:21:57Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f06ae5cf-6297-4c8c-836f-ba5840125396", "record_id": "flaws_cloudtrail:0000306:f06ae5cf-6297-4c8c-836f-ba5840125396", "row_index": 306, "timestamp": "2019-06-06T12:21:57Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f06ae5cf-6297-4c8c-836f-ba5840125396", "eventTime": "2019-06-06T12:21:57Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fec51b6-eeb9-4009-837c-617cb34144ec", "record_id": "flaws_cloudtrail:0000307:2fec51b6-eeb9-4009-837c-617cb34144ec", "row_index": 307, "timestamp": "2019-06-06T12:22:15Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fec51b6-eeb9-4009-837c-617cb34144ec", "eventTime": "2019-06-06T12:22:15Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fec51b6-eeb9-4009-837c-617cb34144ec", "record_id": "flaws_cloudtrail:0000308:2fec51b6-eeb9-4009-837c-617cb34144ec", "row_index": 308, "timestamp": "2019-06-06T12:22:15Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fec51b6-eeb9-4009-837c-617cb34144ec", "eventTime": "2019-06-06T12:22:15Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "276ab10b-be72-48fa-9d7a-c0b16c6228eb", "record_id": "flaws_cloudtrail:0000309:276ab10b-be72-48fa-9d7a-c0b16c6228eb", "row_index": 309, "timestamp": "2019-06-06T12:22:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "276ab10b-be72-48fa-9d7a-c0b16c6228eb", "eventTime": "2019-06-06T12:22:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "276ab10b-be72-48fa-9d7a-c0b16c6228eb", "record_id": "flaws_cloudtrail:0000310:276ab10b-be72-48fa-9d7a-c0b16c6228eb", "row_index": 310, "timestamp": "2019-06-06T12:22:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "276ab10b-be72-48fa-9d7a-c0b16c6228eb", "eventTime": "2019-06-06T12:22:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4d4366b-53aa-429c-a61b-115ff5e5119f", "record_id": "flaws_cloudtrail:0000311:f4d4366b-53aa-429c-a61b-115ff5e5119f", "row_index": 311, "timestamp": "2019-06-06T12:23:20Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4d4366b-53aa-429c-a61b-115ff5e5119f", "eventTime": "2019-06-06T12:23:20Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4d4366b-53aa-429c-a61b-115ff5e5119f", "record_id": "flaws_cloudtrail:0000312:f4d4366b-53aa-429c-a61b-115ff5e5119f", "row_index": 312, "timestamp": "2019-06-06T12:23:20Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4d4366b-53aa-429c-a61b-115ff5e5119f", "eventTime": "2019-06-06T12:23:20Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a381a731-ca4f-4b04-acf4-9e8a16c5e4cf", "record_id": "flaws_cloudtrail:0000313:a381a731-ca4f-4b04-acf4-9e8a16c5e4cf", "row_index": 313, "timestamp": "2019-06-06T12:23:37Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a381a731-ca4f-4b04-acf4-9e8a16c5e4cf", "eventTime": "2019-06-06T12:23:37Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a381a731-ca4f-4b04-acf4-9e8a16c5e4cf", "record_id": "flaws_cloudtrail:0000314:a381a731-ca4f-4b04-acf4-9e8a16c5e4cf", "row_index": 314, "timestamp": "2019-06-06T12:23:37Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a381a731-ca4f-4b04-acf4-9e8a16c5e4cf", "eventTime": "2019-06-06T12:23:37Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39d994555-1877-4af1-8924-a7c6e3e9d718", "record_id": "flaws_cloudtrail:0000315:39d994555-1877-4af1-8924-a7c6e3e9d718", "row_index": 315, "timestamp": "2019-06-06T12:24:05Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39d994555-1877-4af1-8924-a7c6e3e9d718", "eventTime": "2019-06-06T12:24:05Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The role with name SecurityAuditRole cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityAuditRole"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39d994555-1877-4af1-8924-a7c6e3e9d718", "record_id": "flaws_cloudtrail:0000316:39d994555-1877-4af1-8924-a7c6e3e9d718", "row_index": 316, "timestamp": "2019-06-06T12:24:05Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39d994555-1877-4af1-8924-a7c6e3e9d718", "eventTime": "2019-06-06T12:24:05Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The role with name SecurityAuditRole cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityAuditRole"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88a31ab3-5d90-417c-bf16-eacb6a40be35", "record_id": "flaws_cloudtrail:0000317:88a31ab3-5d90-417c-bf16-eacb6a40be35", "row_index": 317, "timestamp": "2019-06-06T12:24:29Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88a31ab3-5d90-417c-bf16-eacb6a40be35", "eventTime": "2019-06-06T12:24:29Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-east-1", "errorCode": "ResourceNotFoundException", "errorMessage": "Function not found: arn:aws:lambda:us-east-1:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88a31ab3-5d90-417c-bf16-eacb6a40be35", "record_id": "flaws_cloudtrail:0000318:88a31ab3-5d90-417c-bf16-eacb6a40be35", "row_index": 318, "timestamp": "2019-06-06T12:24:29Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88a31ab3-5d90-417c-bf16-eacb6a40be35", "eventTime": "2019-06-06T12:24:29Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-east-1", "errorCode": "ResourceNotFoundException", "errorMessage": "Function not found: arn:aws:lambda:us-east-1:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa864976e-bedf-4890-8b3c-ab31917fc585", "record_id": "flaws_cloudtrail:0000319:aa864976e-bedf-4890-8b3c-ab31917fc585", "row_index": 319, "timestamp": "2019-06-06T12:24:44Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa864976e-bedf-4890-8b3c-ab31917fc585", "eventTime": "2019-06-06T12:24:44Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa864976e-bedf-4890-8b3c-ab31917fc585", "record_id": "flaws_cloudtrail:0000320:aa864976e-bedf-4890-8b3c-ab31917fc585", "row_index": 320, "timestamp": "2019-06-06T12:24:44Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa864976e-bedf-4890-8b3c-ab31917fc585", "eventTime": "2019-06-06T12:24:44Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "838a9492-e6a2-4b5b-aec9-1be1f497b8e2", "record_id": "flaws_cloudtrail:0000321:838a9492-e6a2-4b5b-aec9-1be1f497b8e2", "row_index": 321, "timestamp": "2019-06-06T12:24:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "838a9492-e6a2-4b5b-aec9-1be1f497b8e2", "eventTime": "2019-06-06T12:24:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALNR8Q829FJATX7O3", "expiration": "Jun 6, 2019 6:32:37 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "838a9492-e6a2-4b5b-aec9-1be1f497b8e2", "record_id": "flaws_cloudtrail:0000322:838a9492-e6a2-4b5b-aec9-1be1f497b8e2", "row_index": 322, "timestamp": "2019-06-06T12:24:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "838a9492-e6a2-4b5b-aec9-1be1f497b8e2", "eventTime": "2019-06-06T12:24:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALNR8Q829FJATX7O3", "expiration": "Jun 6, 2019 6:32:37 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09424df-3457-4dd1-a04e-55b350a4b50b", "record_id": "flaws_cloudtrail:0000323:09424df-3457-4dd1-a04e-55b350a4b50b", "row_index": 323, "timestamp": "2019-06-06T12:26:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1922, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09424df-3457-4dd1-a04e-55b350a4b50b", "eventTime": "2019-06-06T12:26:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR5FU6VSLA5LGUG14", "expiration": "Jun 6, 2019 1:26:07 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09424df-3457-4dd1-a04e-55b350a4b50b", "record_id": "flaws_cloudtrail:0000324:09424df-3457-4dd1-a04e-55b350a4b50b", "row_index": 324, "timestamp": "2019-06-06T12:26:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1922, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09424df-3457-4dd1-a04e-55b350a4b50b", "eventTime": "2019-06-06T12:26:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR5FU6VSLA5LGUG14", "expiration": "Jun 6, 2019 1:26:07 PM", "sessionToken": "AgoGb3JpZ2luEFgaCXVzLXdlc3QtMiKAAtFgXek9KErQaGuNeUBbV5G+cUJK6Zoa/d04jLqno8I8gPxyI0vo20Lel0mKAV6DyDfEH4exx9WsU/sFb2UcZF99S8Dfb77yjI6fwPzq2QzEheijDYalPixHJt1It5vKXh6ewQUKDhTXA5mNWNd1+MQ7tI8/qgxHmRL3w0RflsrmQZfkBzDlMlURjuBg/ZxPXqvmwGB1CU2BYJtd8b/7DQKoF5hgmAdRpkBRWxkduHTw52Y/A4LgLHTF1pMqVAT5Du7ev0lXHOR3uQrFJzaQntAv35QoIk1FIbaSN9NWA3o6rGbm/87nhf24zYbom47KSg6nHFI70U8W6FfPUoMK3vEq6AIILhAAGgw5NzU0MjYyNjIwMjkiDKGsU2Rz5FWXDgKMnSrFAo5yJEQpVT8xUwut6/ZHlX9ekp8Dt2Py2crEltEBYx1bHsTXzIQ1rZBYWwa/hinH9shMxhfC2afnK15hG7U31GgzMmqKIr7gDPt+Be6SCFbFyREGQtMM6vfERubB6rmp+oTWEMcZ81kvUKWKgywmKrsSfC+niyXjDs/rYOmmwsaFciensuJi3Jlz9rfYRXxeelTkbcIQ8GMoPrQl2dRPSEvPoMGJf6SffmmW7bDxmoQIbia9WNBUspWQisflvKq05oC2Q4IDwdn0UIo+ITupoG8tYPWa7kdI/I3iz91AoTVj28xl+uUw3LZCB16hbwAh1cmuGpjisXmLEyTYkGN0DoIoH2y8EDmi9xBUEWQ47RA52K8DBrLCx8ekrPhT6U1jaAENxVex9mTq3PQI24XAErUkwhnxoOofkeWkjTF3WW89hTXKqEIw34zk5wU="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b69663cd-6d5b-49ad-aae7-c619501f0a73", "record_id": "flaws_cloudtrail:0000325:b69663cd-6d5b-49ad-aae7-c619501f0a73", "row_index": 325, "timestamp": "2019-06-06T12:26:27Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b69663cd-6d5b-49ad-aae7-c619501f0a73", "eventTime": "2019-06-06T12:26:27Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b69663cd-6d5b-49ad-aae7-c619501f0a73", "record_id": "flaws_cloudtrail:0000326:b69663cd-6d5b-49ad-aae7-c619501f0a73", "row_index": 326, "timestamp": "2019-06-06T12:26:27Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b69663cd-6d5b-49ad-aae7-c619501f0a73", "eventTime": "2019-06-06T12:26:27Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "aws-cli/1.16.113 Python/3.6.7 Linux/4.15.0-50-generic botocore/1.12.152", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f13be849-d8e2-4271-a53d-c80112303d2c", "record_id": "flaws_cloudtrail:0000327:f13be849-d8e2-4271-a53d-c80112303d2c", "row_index": 327, "timestamp": "2019-06-06T12:27:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1606, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f13be849-d8e2-4271-a53d-c80112303d2c", "eventTime": "2019-06-06T12:27:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQACYVJ4FKO83T3EJ", "expiration": "Jun 7, 2019 12:27:44 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0eb0c942-2439-4724-8d98-4124fbd511f9", "record_id": "flaws_cloudtrail:0000328:0eb0c942-2439-4724-8d98-4124fbd511f9", "row_index": 328, "timestamp": "2019-06-06T12:27:44Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA56BCMR5YXN2O8T9N", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "5.1.3.142", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0eb0c942-2439-4724-8d98-4124fbd511f9", "eventTime": "2019-06-06T12:27:44Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.3.142", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA56BCMR5YXN2O8T9N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-06T12:27:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/06/06/[$LATEST]bc0f4fa3d2d0c424c10f282e707363ba", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a272e5d7-297d-4afc-8a33-3266bcb746697", "record_id": "flaws_cloudtrail:0000329:a272e5d7-297d-4afc-8a33-3266bcb746697", "row_index": 329, "timestamp": "2019-06-06T12:27:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1605, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a272e5d7-297d-4afc-8a33-3266bcb746697", "eventTime": "2019-06-06T12:27:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA56BCMR5YXN2O8T9N", "expiration": "Jun 7, 2019 12:27:44 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f13be849-d8e2-4271-a53d-c80112303d2c", "record_id": "flaws_cloudtrail:0000330:f13be849-d8e2-4271-a53d-c80112303d2c", "row_index": 330, "timestamp": "2019-06-06T12:27:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1606, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f13be849-d8e2-4271-a53d-c80112303d2c", "eventTime": "2019-06-06T12:27:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQACYVJ4FKO83T3EJ", "expiration": "Jun 7, 2019 12:27:44 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0eb0c942-2439-4724-8d98-4124fbd511f9", "record_id": "flaws_cloudtrail:0000331:0eb0c942-2439-4724-8d98-4124fbd511f9", "row_index": 331, "timestamp": "2019-06-06T12:27:44Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA56BCMR5YXN2O8T9N", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "5.1.3.142", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0eb0c942-2439-4724-8d98-4124fbd511f9", "eventTime": "2019-06-06T12:27:44Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.1.3.142", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA56BCMR5YXN2O8T9N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-06T12:27:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/06/06/[$LATEST]bc0f4fa3d2d0c424c10f282e707363ba", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a272e5d7-297d-4afc-8a33-3266bcb746697", "record_id": "flaws_cloudtrail:0000332:a272e5d7-297d-4afc-8a33-3266bcb746697", "row_index": 332, "timestamp": "2019-06-06T12:27:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1605, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a272e5d7-297d-4afc-8a33-3266bcb746697", "eventTime": "2019-06-06T12:27:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA56BCMR5YXN2O8T9N", "expiration": "Jun 7, 2019 12:27:44 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "636eb60a-736a-4b96-a5e9-b87446f865", "record_id": "flaws_cloudtrail:0000333:636eb60a-736a-4b96-a5e9-b87446f865", "row_index": 333, "timestamp": "2019-06-06T12:31:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "[aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "636eb60a-736a-4b96-a5e9-b87446f865", "eventTime": "2019-06-06T12:31:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "[aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "636eb60a-736a-4b96-a5e9-b87446f865", "record_id": "flaws_cloudtrail:0000334:636eb60a-736a-4b96-a5e9-b87446f865", "row_index": 334, "timestamp": "2019-06-06T12:31:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "[aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "636eb60a-736a-4b96-a5e9-b87446f865", "eventTime": "2019-06-06T12:31:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "[aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09e455cd-d8e8-4d15-a04c-bea4aa780b61", "record_id": "flaws_cloudtrail:0000335:09e455cd-d8e8-4d15-a04c-bea4aa780b61", "row_index": 335, "timestamp": "2019-06-06T12:46:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "[aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09e455cd-d8e8-4d15-a04c-bea4aa780b61", "eventTime": "2019-06-06T12:46:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "[aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09e455cd-d8e8-4d15-a04c-bea4aa780b61", "record_id": "flaws_cloudtrail:0000336:09e455cd-d8e8-4d15-a04c-bea4aa780b61", "row_index": 336, "timestamp": "2019-06-06T12:46:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "[aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09e455cd-d8e8-4d15-a04c-bea4aa780b61", "eventTime": "2019-06-06T12:46:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "[aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "016a2e3c-e9c1-4c37-88e7-3c4ac0719a21", "record_id": "flaws_cloudtrail:0000337:016a2e3c-e9c1-4c37-88e7-3c4ac0719a21", "row_index": 337, "timestamp": "2019-06-06T12:49:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "016a2e3c-e9c1-4c37-88e7-3c4ac0719a21", "eventTime": "2019-06-06T12:49:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "016a2e3c-e9c1-4c37-88e7-3c4ac0719a21", "record_id": "flaws_cloudtrail:0000338:016a2e3c-e9c1-4c37-88e7-3c4ac0719a21", "row_index": 338, "timestamp": "2019-06-06T12:49:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "016a2e3c-e9c1-4c37-88e7-3c4ac0719a21", "eventTime": "2019-06-06T12:49:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da13b2b8-a791-49de-bf6c-da98c54ac8e5", "record_id": "flaws_cloudtrail:0000339:da13b2b8-a791-49de-bf6c-da98c54ac8e5", "row_index": 339, "timestamp": "2019-06-06T12:49:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da13b2b8-a791-49de-bf6c-da98c54ac8e5", "eventTime": "2019-06-06T12:49:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvL3NJZjJ3T1NNNkI4V20yU2lNWVdycmRVcjF3aUErcVhKdHRFdFp2N1BaYnhOMVlYYitUcmtkK25yY2YrbDY5Q0hTWWxNZGxzZTdMK2I0WHU2ZFE4czVKbHVJMW14RWUzYUxVNG9WdDZaSUJzQ0tDazhOTEwrcmQwY0RPeUdJVWExZ0FSbUVxOHI0S1NlemFtUU80STB1aE9kWGZFWi81Y1pleW9OMWswQ3dNQzQ1NUhrdFJwTWxrVk1oUlU0ZTk4cjF2SHgvUFg4WT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da13b2b8-a791-49de-bf6c-da98c54ac8e5", "record_id": "flaws_cloudtrail:0000340:da13b2b8-a791-49de-bf6c-da98c54ac8e5", "row_index": 340, "timestamp": "2019-06-06T12:49:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da13b2b8-a791-49de-bf6c-da98c54ac8e5", "eventTime": "2019-06-06T12:49:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvL3NJZjJ3T1NNNkI4V20yU2lNWVdycmRVcjF3aUErcVhKdHRFdFp2N1BaYnhOMVlYYitUcmtkK25yY2YrbDY5Q0hTWWxNZGxzZTdMK2I0WHU2ZFE4czVKbHVJMW14RWUzYUxVNG9WdDZaSUJzQ0tDazhOTEwrcmQwY0RPeUdJVWExZ0FSbUVxOHI0S1NlemFtUU80STB1aE9kWGZFWi81Y1pleW9OMWswQ3dNQzQ1NUhrdFJwTWxrVk1oUlU0ZTk4cjF2SHgvUFg4WT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61ec2b5e-2de9-4854-87a5-c1a6f64a55f6", "record_id": "flaws_cloudtrail:0000341:61ec2b5e-2de9-4854-87a5-c1a6f64a55f6", "row_index": 341, "timestamp": "2019-06-06T12:49:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61ec2b5e-2de9-4854-87a5-c1a6f64a55f6", "eventTime": "2019-06-06T12:49:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCb3BERFVRLzk0Yk1xbHJCVzlKelU5UWRCS3BhZDlCTnNLSWg1elptY0xhT2FQcWJGMXdCVEx4clQzM1R0NnoxUjliU3BCRmhlRW5UekRSZHZMTUxTRTNJU245Y3JqZS8rRDBGMkpwMW9qVkxBUC9IVVFFV0FQd3BGTktkaUVOQlE4Rmx1MlRldjBRT091ZWpaaGZlditrbENEOXBwYm1GbnRZbjRsQ0JvdVJtWG1jZmIrcFdSdWI5ME1QMVdoSmNiaEUyUnE5NVBha1RhQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61ec2b5e-2de9-4854-87a5-c1a6f64a55f6", "record_id": "flaws_cloudtrail:0000342:61ec2b5e-2de9-4854-87a5-c1a6f64a55f6", "row_index": 342, "timestamp": "2019-06-06T12:49:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61ec2b5e-2de9-4854-87a5-c1a6f64a55f6", "eventTime": "2019-06-06T12:49:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCb3BERFVRLzk0Yk1xbHJCVzlKelU5UWRCS3BhZDlCTnNLSWg1elptY0xhT2FQcWJGMXdCVEx4clQzM1R0NnoxUjliU3BCRmhlRW5UekRSZHZMTUxTRTNJU245Y3JqZS8rRDBGMkpwMW9qVkxBUC9IVVFFV0FQd3BGTktkaUVOQlE4Rmx1MlRldjBRT091ZWpaaGZlditrbENEOXBwYm1GbnRZbjRsQ0JvdVJtWG1jZmIrcFdSdWI5ME1QMVdoSmNiaEUyUnE5NVBha1RhQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f6016f3-6c7d-43c5-a4a2-2afe05e10e70", "record_id": "flaws_cloudtrail:0000343:7f6016f3-6c7d-43c5-a4a2-2afe05e10e70", "row_index": 343, "timestamp": "2019-06-06T12:49:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f6016f3-6c7d-43c5-a4a2-2afe05e10e70", "eventTime": "2019-06-06T12:49:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFZ2M3cmE0WUMrTDFrdzNPOWpMUWZQdWg2VHd6VS9pN0hiQ2cvcUs2KzJBYXVkOXo2aVkxd1VaYnQzODBLcXJMbWRJTi9TSTI0a2oyZzFGVHU2SmM0bzJzTHoxU0tRREkzSFJ4STlWQTFlR3k3eFFUN05uTFRmdmMzTS9VMGVzQndDa0g2bkdnS25PRUkvU1oxZVRoWlpPWGJiZ01qWTl5aVB3WHFxdjQwQWVlWnpGWVp1T2tOUHQ3cXdJS01vMUgxMEdLVlAwUFJ3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f6016f3-6c7d-43c5-a4a2-2afe05e10e70", "record_id": "flaws_cloudtrail:0000344:7f6016f3-6c7d-43c5-a4a2-2afe05e10e70", "row_index": 344, "timestamp": "2019-06-06T12:49:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f6016f3-6c7d-43c5-a4a2-2afe05e10e70", "eventTime": "2019-06-06T12:49:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFZ2M3cmE0WUMrTDFrdzNPOWpMUWZQdWg2VHd6VS9pN0hiQ2cvcUs2KzJBYXVkOXo2aVkxd1VaYnQzODBLcXJMbWRJTi9TSTI0a2oyZzFGVHU2SmM0bzJzTHoxU0tRREkzSFJ4STlWQTFlR3k3eFFUN05uTFRmdmMzTS9VMGVzQndDa0g2bkdnS25PRUkvU1oxZVRoWlpPWGJiZ01qWTl5aVB3WHFxdjQwQWVlWnpGWVp1T2tOUHQ3cXdJS01vMUgxMEdLVlAwUFJ3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e160c4a5-23d3-46c2-8424-0c6f7160fa7f", "record_id": "flaws_cloudtrail:0000345:e160c4a5-23d3-46c2-8424-0c6f7160fa7f", "row_index": 345, "timestamp": "2019-06-06T12:49:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e160c4a5-23d3-46c2-8424-0c6f7160fa7f", "eventTime": "2019-06-06T12:49:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1cGFGb2ZZNVpjWEt2Nm9xclZ0M3dUOFFNOVJYbVVlSGNkZmF6am91MElsL3JkMExEcXd0Uk1jbzFWL0RVcHhVQ2xJczVlS3hiZm12MWE1dTlPbzMzclMzeUNXSFhuRU9mYnlrYVBOaDZYdjNGRW1JR0hUaEFtbjhVZGloQlZ2MkpTbVNmeFhPM1dycWRuVDV1bWVzcGhENEFqeHE3N1VRaUNIdHZJRFFacnVWRHR6UWJTOVhXVDlXMk9sZ0Z6OGJYZ0FkNXlWMkM4UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e160c4a5-23d3-46c2-8424-0c6f7160fa7f", "record_id": "flaws_cloudtrail:0000346:e160c4a5-23d3-46c2-8424-0c6f7160fa7f", "row_index": 346, "timestamp": "2019-06-06T12:49:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e160c4a5-23d3-46c2-8424-0c6f7160fa7f", "eventTime": "2019-06-06T12:49:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1cGFGb2ZZNVpjWEt2Nm9xclZ0M3dUOFFNOVJYbVVlSGNkZmF6am91MElsL3JkMExEcXd0Uk1jbzFWL0RVcHhVQ2xJczVlS3hiZm12MWE1dTlPbzMzclMzeUNXSFhuRU9mYnlrYVBOaDZYdjNGRW1JR0hUaEFtbjhVZGloQlZ2MkpTbVNmeFhPM1dycWRuVDV1bWVzcGhENEFqeHE3N1VRaUNIdHZJRFFacnVWRHR6UWJTOVhXVDlXMk9sZ0Z6OGJYZ0FkNXlWMkM4UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "942f9b03-2809-46d8-a79a-e10f1e4aea18", "record_id": "flaws_cloudtrail:0000347:942f9b03-2809-46d8-a79a-e10f1e4aea18", "row_index": 347, "timestamp": "2019-06-06T12:50:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "942f9b03-2809-46d8-a79a-e10f1e4aea18", "eventTime": "2019-06-06T12:50:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlUGcyUXZKMWtOWjl1SHUrQzVyRUkxOUp6ODVxeFZkRHVHNW1MdTZUSkhCbFFFZ1ZrNzVndEh1ODhIdGMyTVg2bWJjVC91NGZ0UEV3WlQ4YzVPSnFmOENZTnQ3M005aXk3bnlGZzZpUEZucU9wZEd0MDJHRnZoeFVQc2JvWk9WcnVucVJTMjhLOUdoZmZZd2svM1htY2Q3VXJFSHFXdzd0YzhOYjVNeTBtOGI2YUp6SmlHdDBBVldvTHo3bnNteG1kczBKSWw5elFKVnlYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "942f9b03-2809-46d8-a79a-e10f1e4aea18", "record_id": "flaws_cloudtrail:0000348:942f9b03-2809-46d8-a79a-e10f1e4aea18", "row_index": 348, "timestamp": "2019-06-06T12:50:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "942f9b03-2809-46d8-a79a-e10f1e4aea18", "eventTime": "2019-06-06T12:50:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlUGcyUXZKMWtOWjl1SHUrQzVyRUkxOUp6ODVxeFZkRHVHNW1MdTZUSkhCbFFFZ1ZrNzVndEh1ODhIdGMyTVg2bWJjVC91NGZ0UEV3WlQ4YzVPSnFmOENZTnQ3M005aXk3bnlGZzZpUEZucU9wZEd0MDJHRnZoeFVQc2JvWk9WcnVucVJTMjhLOUdoZmZZd2svM1htY2Q3VXJFSHFXdzd0YzhOYjVNeTBtOGI2YUp6SmlHdDBBVldvTHo3bnNteG1kczBKSWw5elFKVnlYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce571bf1-e398-4508-9589-1d3418d3811d", "record_id": "flaws_cloudtrail:0000349:ce571bf1-e398-4508-9589-1d3418d3811d", "row_index": 349, "timestamp": "2019-06-06T12:50:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce571bf1-e398-4508-9589-1d3418d3811d", "eventTime": "2019-06-06T12:50:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBZkRVVTErUzR0NEh4WlNqWHdnM0cwVzRBK0JhUmJKbUJBNzNwTjQ5dW5kMkdWdnRsMVBCaVpEQ0JsOFJOb2QydWJ3TDQzRU0rVS9sNnVDZCtKMXlhejU5TUJPYUdpNUo4K0h6SEFGdWNQS0tuYzRtTzI4eFVZaEZNT3ZJTjhDbGZ2UVFCM3JiaWRZbmJDZXVHTFVaakRiN2xKRjl2ejRxL2J1d2tVVVZneUxRaU9SNzNYQ25LSmRPbnQ2OE9OYlU0WEJuRXBqTVdnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce571bf1-e398-4508-9589-1d3418d3811d", "record_id": "flaws_cloudtrail:0000350:ce571bf1-e398-4508-9589-1d3418d3811d", "row_index": 350, "timestamp": "2019-06-06T12:50:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce571bf1-e398-4508-9589-1d3418d3811d", "eventTime": "2019-06-06T12:50:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBZkRVVTErUzR0NEh4WlNqWHdnM0cwVzRBK0JhUmJKbUJBNzNwTjQ5dW5kMkdWdnRsMVBCaVpEQ0JsOFJOb2QydWJ3TDQzRU0rVS9sNnVDZCtKMXlhejU5TUJPYUdpNUo4K0h6SEFGdWNQS0tuYzRtTzI4eFVZaEZNT3ZJTjhDbGZ2UVFCM3JiaWRZbmJDZXVHTFVaakRiN2xKRjl2ejRxL2J1d2tVVVZneUxRaU9SNzNYQ25LSmRPbnQ2OE9OYlU0WEJuRXBqTVdnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b88dc91-4649-4b24-a9aa-42178c2a79cd", "record_id": "flaws_cloudtrail:0000351:9b88dc91-4649-4b24-a9aa-42178c2a79cd", "row_index": 351, "timestamp": "2019-06-06T12:50:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b88dc91-4649-4b24-a9aa-42178c2a79cd", "eventTime": "2019-06-06T12:50:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1MGhkcGwzMzhob1dFV2Fsa3owT2tKMXBzb2QrL2pjY3B2TVhYU1pQWVlvRk5RVE5oZWdiR1lsbW0yemVPVXBIM1RhZU9HUG9iNWdTcnZ0eE9rell2M3B6ZjkvenEzbmgwTlMwLy9XQWZhVjlHMmI4VWpZWTBYcUZOWVY2Q2xnendOVVVWcytRNEVtRU1Bc3RiMnFZYmlzdUJ0dmtROGJzd3k4NlR5YVAzVGhSMEpUT0pYOXBtc0czaEhTdlA5akdYeUE4ZFFob1VDZDJLUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b88dc91-4649-4b24-a9aa-42178c2a79cd", "record_id": "flaws_cloudtrail:0000352:9b88dc91-4649-4b24-a9aa-42178c2a79cd", "row_index": 352, "timestamp": "2019-06-06T12:50:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b88dc91-4649-4b24-a9aa-42178c2a79cd", "eventTime": "2019-06-06T12:50:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1MGhkcGwzMzhob1dFV2Fsa3owT2tKMXBzb2QrL2pjY3B2TVhYU1pQWVlvRk5RVE5oZWdiR1lsbW0yemVPVXBIM1RhZU9HUG9iNWdTcnZ0eE9rell2M3B6ZjkvenEzbmgwTlMwLy9XQWZhVjlHMmI4VWpZWTBYcUZOWVY2Q2xnendOVVVWcytRNEVtRU1Bc3RiMnFZYmlzdUJ0dmtROGJzd3k4NlR5YVAzVGhSMEpUT0pYOXBtc0czaEhTdlA5akdYeUE4ZFFob1VDZDJLUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe51bf3c-cb5b-46f5-a725-b35c89aab7e9", "record_id": "flaws_cloudtrail:0000353:fe51bf3c-cb5b-46f5-a725-b35c89aab7e9", "row_index": 353, "timestamp": "2019-06-06T12:50:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe51bf3c-cb5b-46f5-a725-b35c89aab7e9", "eventTime": "2019-06-06T12:50:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLa2kxbEZJQWU5eDFYRVhvRlY1c3pNUTFjTHRFSStkZ1BOb2dpV2tNTWh0U2RLcEpMcGV6RGFaSDJTVlZ0OEhBbXlELy84d1NHRVRyT1hMelNxTmo1cHlCeFZyYVdtS1dWSWV4U3I0Zmo4M0RwNXMrOFJvZG9LbERMc2Ztd3NrbU5MeEhUdjIwYzlrbFBCc3d5RzlsT3FqZUFFdm5zdEJxZXMzRFFkSEV5a1RVUFhOQkNlbyttZzhSWkd6TjIwaXByYU02VlU5b3NEOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe51bf3c-cb5b-46f5-a725-b35c89aab7e9", "record_id": "flaws_cloudtrail:0000354:fe51bf3c-cb5b-46f5-a725-b35c89aab7e9", "row_index": 354, "timestamp": "2019-06-06T12:50:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe51bf3c-cb5b-46f5-a725-b35c89aab7e9", "eventTime": "2019-06-06T12:50:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLa2kxbEZJQWU5eDFYRVhvRlY1c3pNUTFjTHRFSStkZ1BOb2dpV2tNTWh0U2RLcEpMcGV6RGFaSDJTVlZ0OEhBbXlELy84d1NHRVRyT1hMelNxTmo1cHlCeFZyYVdtS1dWSWV4U3I0Zmo4M0RwNXMrOFJvZG9LbERMc2Ztd3NrbU5MeEhUdjIwYzlrbFBCc3d5RzlsT3FqZUFFdm5zdEJxZXMzRFFkSEV5a1RVUFhOQkNlbyttZzhSWkd6TjIwaXByYU02VlU5b3NEOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbe042d6-47ee-494f-a7ad-fd6eb8565bf6", "record_id": "flaws_cloudtrail:0000355:cbe042d6-47ee-494f-a7ad-fd6eb8565bf6", "row_index": 355, "timestamp": "2019-06-06T12:50:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbe042d6-47ee-494f-a7ad-fd6eb8565bf6", "eventTime": "2019-06-06T12:50:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyU2tWSHBkYkxmVkhPMW5VYmVhTkFOS1dxZUF3a2Z4STNpc2ZwOUgwQ3RQMGp1M3oxQVZUQ2MxcE92WFovMWRwZm1OdmlYd0ZnN2J6VlplRFlmdmFYK0FZSWtMb05ydlZJdjFFV0t3U1BXbDVFY0ZPQkI3aU5RR2V6eWZpajFqZmpnQjJ1N0JzUHpNWkRXL1dQdDVCMXdNamQ3M1Z3clBEOGYvcWd5TVJ0NVNla2JSM1RhS2RZKy8rZkxmR1VsbEE1K0p6OERDaXVTSThWZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbe042d6-47ee-494f-a7ad-fd6eb8565bf6", "record_id": "flaws_cloudtrail:0000356:cbe042d6-47ee-494f-a7ad-fd6eb8565bf6", "row_index": 356, "timestamp": "2019-06-06T12:50:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbe042d6-47ee-494f-a7ad-fd6eb8565bf6", "eventTime": "2019-06-06T12:50:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyU2tWSHBkYkxmVkhPMW5VYmVhTkFOS1dxZUF3a2Z4STNpc2ZwOUgwQ3RQMGp1M3oxQVZUQ2MxcE92WFovMWRwZm1OdmlYd0ZnN2J6VlplRFlmdmFYK0FZSWtMb05ydlZJdjFFV0t3U1BXbDVFY0ZPQkI3aU5RR2V6eWZpajFqZmpnQjJ1N0JzUHpNWkRXL1dQdDVCMXdNamQ3M1Z3clBEOGYvcWd5TVJ0NVNla2JSM1RhS2RZKy8rZkxmR1VsbEE1K0p6OERDaXVTSThWZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df23b75c-f400-440b-9cfc-03747094e48c", "record_id": "flaws_cloudtrail:0000357:df23b75c-f400-440b-9cfc-03747094e48c", "row_index": 357, "timestamp": "2019-06-06T12:50:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df23b75c-f400-440b-9cfc-03747094e48c", "eventTime": "2019-06-06T12:50:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLbWRCTDBlQnVGdGVJaDgyOUhPVjJRVFZ0Mnh6UXFtWFZ2eFNaMktpRXIvVHV2RnhsS1kxME5LYURCdkgvVkxMRzd2cm1acjlYSU9vbmp1elVEdkRSV05keElESU9zSVJaZmp6V2VhVU9MOHAxczdoQ0RxZ1ZKYVdoWUY5SkpMdUhXZjRZazVyN2dsL1A0OHZrNnZ2MTNzK1lnZ2R2ajVlc2RsZURlbXdOK2JsR1V3bWlKTi80WVFxUmMraEFoODY0UkpsTUFQbmQ2NzlwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df23b75c-f400-440b-9cfc-03747094e48c", "record_id": "flaws_cloudtrail:0000358:df23b75c-f400-440b-9cfc-03747094e48c", "row_index": 358, "timestamp": "2019-06-06T12:50:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df23b75c-f400-440b-9cfc-03747094e48c", "eventTime": "2019-06-06T12:50:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLbWRCTDBlQnVGdGVJaDgyOUhPVjJRVFZ0Mnh6UXFtWFZ2eFNaMktpRXIvVHV2RnhsS1kxME5LYURCdkgvVkxMRzd2cm1acjlYSU9vbmp1elVEdkRSV05keElESU9zSVJaZmp6V2VhVU9MOHAxczdoQ0RxZ1ZKYVdoWUY5SkpMdUhXZjRZazVyN2dsL1A0OHZrNnZ2MTNzK1lnZ2R2ajVlc2RsZURlbXdOK2JsR1V3bWlKTi80WVFxUmMraEFoODY0UkpsTUFQbmQ2NzlwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f02d5ec-3a4c-496c-a0c6-b303ef04f9f6", "record_id": "flaws_cloudtrail:0000359:0f02d5ec-3a4c-496c-a0c6-b303ef04f9f6", "row_index": 359, "timestamp": "2019-06-06T12:50:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f02d5ec-3a4c-496c-a0c6-b303ef04f9f6", "eventTime": "2019-06-06T12:50:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRUlBtL0hQM3N4L0ZCRlRnU3pQTkN1dDFkUzUwbmJFMG1QZGwwRkZhcHlvcjNYcHhQS1NjZWJUUHNqdUdvUXlNcjJtVzhIZkxkUUJDUUs3N21BRDJrTXZBMXZ2Qk9BQUJtY2tpK0NPZjlOQTBQZDkza0tyZy9VNWZSMG01MW9TU2JOT0Y2alkrYVpDblQvNVNMeHlDSFVZSXY0Zk52WGF1ZGhhMTdLYXhkOFJwQ3E0VTlURTV0ck5iM3gxVklwK2JPRE1HWlFJYWlQMEIrQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f02d5ec-3a4c-496c-a0c6-b303ef04f9f6", "record_id": "flaws_cloudtrail:0000360:0f02d5ec-3a4c-496c-a0c6-b303ef04f9f6", "row_index": 360, "timestamp": "2019-06-06T12:50:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f02d5ec-3a4c-496c-a0c6-b303ef04f9f6", "eventTime": "2019-06-06T12:50:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRUlBtL0hQM3N4L0ZCRlRnU3pQTkN1dDFkUzUwbmJFMG1QZGwwRkZhcHlvcjNYcHhQS1NjZWJUUHNqdUdvUXlNcjJtVzhIZkxkUUJDUUs3N21BRDJrTXZBMXZ2Qk9BQUJtY2tpK0NPZjlOQTBQZDkza0tyZy9VNWZSMG01MW9TU2JOT0Y2alkrYVpDblQvNVNMeHlDSFVZSXY0Zk52WGF1ZGhhMTdLYXhkOFJwQ3E0VTlURTV0ck5iM3gxVklwK2JPRE1HWlFJYWlQMEIrQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73cf4879-d244-4c72-88b4-2439e65e4971", "record_id": "flaws_cloudtrail:0000361:73cf4879-d244-4c72-88b4-2439e65e4971", "row_index": 361, "timestamp": "2019-06-06T12:50:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73cf4879-d244-4c72-88b4-2439e65e4971", "eventTime": "2019-06-06T12:50:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJWWxmMXZPdldkWDJWZUxtQUxSQi9XMW42eTZhUFJyL0U3YisrQ29GQmZFaEIzc0hnckJlb0dyVjZwVEpvOXdJVHJNZkQyVEhQbTlQVlgvWGdCZE4vaGNIYk1ZSVZzaGp5NnplaUMyR0g2VHl3NDhmbitxVjdBU2lvZ1VqWmZTYWJPZ2FQVFcvY1N5WVhhVklTUWJCQ3J0NlVxcjdPZWFYNjMxYnRnNkk2UHVjTjl5cGxSbjR3UTBRZlE0eG1PYzdmQXB0dFoyblorUFJBZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73cf4879-d244-4c72-88b4-2439e65e4971", "record_id": "flaws_cloudtrail:0000362:73cf4879-d244-4c72-88b4-2439e65e4971", "row_index": 362, "timestamp": "2019-06-06T12:50:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73cf4879-d244-4c72-88b4-2439e65e4971", "eventTime": "2019-06-06T12:50:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJWWxmMXZPdldkWDJWZUxtQUxSQi9XMW42eTZhUFJyL0U3YisrQ29GQmZFaEIzc0hnckJlb0dyVjZwVEpvOXdJVHJNZkQyVEhQbTlQVlgvWGdCZE4vaGNIYk1ZSVZzaGp5NnplaUMyR0g2VHl3NDhmbitxVjdBU2lvZ1VqWmZTYWJPZ2FQVFcvY1N5WVhhVklTUWJCQ3J0NlVxcjdPZWFYNjMxYnRnNkk2UHVjTjl5cGxSbjR3UTBRZlE0eG1PYzdmQXB0dFoyblorUFJBZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78c9cd92-d848-498c-b010-606187fada9", "record_id": "flaws_cloudtrail:0000363:78c9cd92-d848-498c-b010-606187fada9", "row_index": 363, "timestamp": "2019-06-06T12:50:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78c9cd92-d848-498c-b010-606187fada9", "eventTime": "2019-06-06T12:50:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0MWVlVFk0anVQS2kyTm02QnFsckZOWE54dzVMcWYweHFId29BZnJKby9ySW5RRTBoM1RwYkxOZ2NEQ0FSSUY0MzVib0NveG56ZG5nOTlYd3VHd0RnK25GWHBpaXNEUG8zdlVWSDFTVVVXbHpndDBQZXAxVE8zRGdvb1dVbkphaWVyOVBtOE14Wmk2ZzE4dkdXUWhHU0Q1VTg2ZCthOTdWTkpRbDFBYm84ekJJdm1uYnBJblNtVnFURmRRM0xlTHpQN20zTGRPc21RTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78c9cd92-d848-498c-b010-606187fada9", "record_id": "flaws_cloudtrail:0000364:78c9cd92-d848-498c-b010-606187fada9", "row_index": 364, "timestamp": "2019-06-06T12:50:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78c9cd92-d848-498c-b010-606187fada9", "eventTime": "2019-06-06T12:50:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0MWVlVFk0anVQS2kyTm02QnFsckZOWE54dzVMcWYweHFId29BZnJKby9ySW5RRTBoM1RwYkxOZ2NEQ0FSSUY0MzVib0NveG56ZG5nOTlYd3VHd0RnK25GWHBpaXNEUG8zdlVWSDFTVVVXbHpndDBQZXAxVE8zRGdvb1dVbkphaWVyOVBtOE14Wmk2ZzE4dkdXUWhHU0Q1VTg2ZCthOTdWTkpRbDFBYm84ekJJdm1uYnBJblNtVnFURmRRM0xlTHpQN20zTGRPc21RTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15866-d9e4-475c-abbd-b209a6443670", "record_id": "flaws_cloudtrail:0000365:15866-d9e4-475c-abbd-b209a6443670", "row_index": 365, "timestamp": "2019-06-06T12:50:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15866-d9e4-475c-abbd-b209a6443670", "eventTime": "2019-06-06T12:50:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpeUZvamJJWGJSM21HVzgySW80N2ZCTFVTRnRpTFZnRFVyVXZxNCtpak5GQmhtU25DUGJzamNpUHp2M2h2Rmc3R1ZNSFhSSk5OK2Jsb3M0dzFxc0FyV1l6QzE5N1c3cFpHQkhIcTRBVktqVUpCSjIzQnE1MDBOUEtXcEFEUmZTUitiRkZGVDV2M0VTWDBNS1J5cXVCR21PUW9rVVNYemN4WnZENmxHYncybzY5ME9GU3Q2bzJGK3NpdGRrdEI0RGdGbWZTS1UzL0JMRjZsZmMwaVlEWlNoZGFzSmo4OU5JPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15866-d9e4-475c-abbd-b209a6443670", "record_id": "flaws_cloudtrail:0000366:15866-d9e4-475c-abbd-b209a6443670", "row_index": 366, "timestamp": "2019-06-06T12:50:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15866-d9e4-475c-abbd-b209a6443670", "eventTime": "2019-06-06T12:50:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpeUZvamJJWGJSM21HVzgySW80N2ZCTFVTRnRpTFZnRFVyVXZxNCtpak5GQmhtU25DUGJzamNpUHp2M2h2Rmc3R1ZNSFhSSk5OK2Jsb3M0dzFxc0FyV1l6QzE5N1c3cFpHQkhIcTRBVktqVUpCSjIzQnE1MDBOUEtXcEFEUmZTUitiRkZGVDV2M0VTWDBNS1J5cXVCR21PUW9rVVNYemN4WnZENmxHYncybzY5ME9GU3Q2bzJGK3NpdGRrdEI0RGdGbWZTS1UzL0JMRjZsZmMwaVlEWlNoZGFzSmo4OU5JPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "459599f-acf7-41c5-8b77-ce597efbf521", "record_id": "flaws_cloudtrail:0000367:459599f-acf7-41c5-8b77-ce597efbf521", "row_index": 367, "timestamp": "2019-06-06T12:50:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "459599f-acf7-41c5-8b77-ce597efbf521", "eventTime": "2019-06-06T12:50:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6MU5QdVBmbnZXblAyam5hSGxUbng3cGxRVG9WUkNBMkg3V2JBaFVtbGhIdG5lcUpIWGY0YUI0cDhHRWdJWlArR1Z0Ym9XNHF2ZW00eURhMzNETmwzaTZ3VHJ5ZjZPaTdpWCtnSGJZem9waDJYYlNydlNRZkx0dHhNRUlQY2hDWU9yTHJQUDRVcm55d3VVQ3JnbjloSkdCaU1rdkFWRkd4dzUzQURyVTdLWlFwTlQ1MEJUVHZJNnRpUFFYdENGUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "459599f-acf7-41c5-8b77-ce597efbf521", "record_id": "flaws_cloudtrail:0000368:459599f-acf7-41c5-8b77-ce597efbf521", "row_index": 368, "timestamp": "2019-06-06T12:50:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "459599f-acf7-41c5-8b77-ce597efbf521", "eventTime": "2019-06-06T12:50:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6MU5QdVBmbnZXblAyam5hSGxUbng3cGxRVG9WUkNBMkg3V2JBaFVtbGhIdG5lcUpIWGY0YUI0cDhHRWdJWlArR1Z0Ym9XNHF2ZW00eURhMzNETmwzaTZ3VHJ5ZjZPaTdpWCtnSGJZem9waDJYYlNydlNRZkx0dHhNRUlQY2hDWU9yTHJQUDRVcm55d3VVQ3JnbjloSkdCaU1rdkFWRkd4dzUzQURyVTdLWlFwTlQ1MEJUVHZJNnRpUFFYdENGUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97acfd36-a17b-4f96-aee5-7ca37fc094c4", "record_id": "flaws_cloudtrail:0000369:97acfd36-a17b-4f96-aee5-7ca37fc094c4", "row_index": 369, "timestamp": "2019-06-06T12:50:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97acfd36-a17b-4f96-aee5-7ca37fc094c4", "eventTime": "2019-06-06T12:50:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvUVNsSkhGMGp0TmpGWGRQZ0dtYnprV0xHcG9yTmhlalkvQXRtUjFtNlRuNHdFMFMzM2lCM0l0N2tsMlpFN2pEd1Z4cC9HNGkxK0lwcVpCTE1OSDFVVE8vNmJqc2l5OWFWamFhcTk1QVY1RWczUzhNMHdRU0RYcmNYWXlmMWN4Z3VlcFk4RnFYVnprOVIrMzRQQk4wNUNyTDVuUEVaTDNmbVZXUWZMTWRtNkg5Q1NuVk5yTWVRSUIyREdtVWRTdTNPNFV6Vm15ZTdXQkZyTHFnMUZPYkxUcXhzdEZPUWN3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97acfd36-a17b-4f96-aee5-7ca37fc094c4", "record_id": "flaws_cloudtrail:0000370:97acfd36-a17b-4f96-aee5-7ca37fc094c4", "row_index": 370, "timestamp": "2019-06-06T12:50:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97acfd36-a17b-4f96-aee5-7ca37fc094c4", "eventTime": "2019-06-06T12:50:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvUVNsSkhGMGp0TmpGWGRQZ0dtYnprV0xHcG9yTmhlalkvQXRtUjFtNlRuNHdFMFMzM2lCM0l0N2tsMlpFN2pEd1Z4cC9HNGkxK0lwcVpCTE1OSDFVVE8vNmJqc2l5OWFWamFhcTk1QVY1RWczUzhNMHdRU0RYcmNYWXlmMWN4Z3VlcFk4RnFYVnprOVIrMzRQQk4wNUNyTDVuUEVaTDNmbVZXUWZMTWRtNkg5Q1NuVk5yTWVRSUIyREdtVWRTdTNPNFV6Vm15ZTdXQkZyTHFnMUZPYkxUcXhzdEZPUWN3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5c7a411-c3c8-407a-bc41-5e9d17b3ef9e", "record_id": "flaws_cloudtrail:0000371:f5c7a411-c3c8-407a-bc41-5e9d17b3ef9e", "row_index": 371, "timestamp": "2019-06-06T12:50:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5c7a411-c3c8-407a-bc41-5e9d17b3ef9e", "eventTime": "2019-06-06T12:50:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJObDJFR1MwbFhJRStyWE5HaTVVQjl2SmJsWTNqZFdSclRsdUcrV2xoeVV1K08xNkk0V0VRS1l4THJPYkxyRE50NXlpb2ZwdGtqM0FHdU9lQ0JHWWZFdk5ScWlIU2t4Z1IyT0Z2T1F5dUVRR2svT0JFZ0tleXVCNnIyaEQvTnpRKzVpWDFaZEZRUk4zV0pQVzJuTUVFSTlUdC93NVo0bFJKQjZoQnJ1YmwyYTJsdnVKTCtReS9ocDV1UXZ4Umgxcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5c7a411-c3c8-407a-bc41-5e9d17b3ef9e", "record_id": "flaws_cloudtrail:0000372:f5c7a411-c3c8-407a-bc41-5e9d17b3ef9e", "row_index": 372, "timestamp": "2019-06-06T12:50:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5c7a411-c3c8-407a-bc41-5e9d17b3ef9e", "eventTime": "2019-06-06T12:50:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJObDJFR1MwbFhJRStyWE5HaTVVQjl2SmJsWTNqZFdSclRsdUcrV2xoeVV1K08xNkk0V0VRS1l4THJPYkxyRE50NXlpb2ZwdGtqM0FHdU9lQ0JHWWZFdk5ScWlIU2t4Z1IyT0Z2T1F5dUVRR2svT0JFZ0tleXVCNnIyaEQvTnpRKzVpWDFaZEZRUk4zV0pQVzJuTUVFSTlUdC93NVo0bFJKQjZoQnJ1YmwyYTJsdnVKTCtReS9ocDV1UXZ4Umgxcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a16e4f5f-ffab-4e36-946d-1dbe9e049bb1", "record_id": "flaws_cloudtrail:0000373:a16e4f5f-ffab-4e36-946d-1dbe9e049bb1", "row_index": 373, "timestamp": "2019-06-06T12:50:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a16e4f5f-ffab-4e36-946d-1dbe9e049bb1", "eventTime": "2019-06-06T12:50:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1VlNWVXVjaEsza2VTTjRrT0RwZkNwbDBtVEExd3BPb0d6eHBQRlpHTE1Ncmp5YXJVZTBVd0dyU2xxWG42UkRuZFppS2g5NWtmY0ZMNjgyNEIvYS9nczQyLzVLZEI0UXdFZFlJVlhBWk1yQUlkZXNTWmFyaW10QytOOUlPZ29ZdFg0MWFkeUhQOUtLOGRGQjJvcEJ2OVlYMUtuWXM4Umc4MmZZNUN6bWdaYkdGWkJrMzV5cHhhN0k2ZkN6YnBPZU9nM0lhbmZuVDRQRm4wcmRDRHZtaE5jbEVNeC8xVDdvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a16e4f5f-ffab-4e36-946d-1dbe9e049bb1", "record_id": "flaws_cloudtrail:0000374:a16e4f5f-ffab-4e36-946d-1dbe9e049bb1", "row_index": 374, "timestamp": "2019-06-06T12:50:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a16e4f5f-ffab-4e36-946d-1dbe9e049bb1", "eventTime": "2019-06-06T12:50:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1VlNWVXVjaEsza2VTTjRrT0RwZkNwbDBtVEExd3BPb0d6eHBQRlpHTE1Ncmp5YXJVZTBVd0dyU2xxWG42UkRuZFppS2g5NWtmY0ZMNjgyNEIvYS9nczQyLzVLZEI0UXdFZFlJVlhBWk1yQUlkZXNTWmFyaW10QytOOUlPZ29ZdFg0MWFkeUhQOUtLOGRGQjJvcEJ2OVlYMUtuWXM4Umc4MmZZNUN6bWdaYkdGWkJrMzV5cHhhN0k2ZkN6YnBPZU9nM0lhbmZuVDRQRm4wcmRDRHZtaE5jbEVNeC8xVDdvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a149aac-7e3d-4b99-adad-5df0dc91dced", "record_id": "flaws_cloudtrail:0000375:3a149aac-7e3d-4b99-adad-5df0dc91dced", "row_index": 375, "timestamp": "2019-06-06T12:50:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a149aac-7e3d-4b99-adad-5df0dc91dced", "eventTime": "2019-06-06T12:50:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBNEo0M25wREJBWUIvU0xIMnFhb3hEbmtnOWtXbzZoYllMOU5mVGJnTEtSS0swakRpZ3Fhc0ZUZDB0dU9WazdETXhaUVd5cHlPMGNKd2p0VUdWRHZXMUlWYlYxWHo4Z0lNTkY2VDFaN2hXK09seXl3SFh5cnBmZlVSbHNERHNBS2NPQkQ1V2JuNW9aRnBkQndoaEM2THVUbVg0Z3JTQVowRTJmSTBiWmVZL1hDWU5iZGt1MEJEN1VwTFQzeUhwUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a149aac-7e3d-4b99-adad-5df0dc91dced", "record_id": "flaws_cloudtrail:0000376:3a149aac-7e3d-4b99-adad-5df0dc91dced", "row_index": 376, "timestamp": "2019-06-06T12:50:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a149aac-7e3d-4b99-adad-5df0dc91dced", "eventTime": "2019-06-06T12:50:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBNEo0M25wREJBWUIvU0xIMnFhb3hEbmtnOWtXbzZoYllMOU5mVGJnTEtSS0swakRpZ3Fhc0ZUZDB0dU9WazdETXhaUVd5cHlPMGNKd2p0VUdWRHZXMUlWYlYxWHo4Z0lNTkY2VDFaN2hXK09seXl3SFh5cnBmZlVSbHNERHNBS2NPQkQ1V2JuNW9aRnBkQndoaEM2THVUbVg0Z3JTQVowRTJmSTBiWmVZL1hDWU5iZGt1MEJEN1VwTFQzeUhwUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22950a06-86ce-4f12-9c3c-0527f1a9e912", "record_id": "flaws_cloudtrail:0000377:22950a06-86ce-4f12-9c3c-0527f1a9e912", "row_index": 377, "timestamp": "2019-06-06T12:50:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22950a06-86ce-4f12-9c3c-0527f1a9e912", "eventTime": "2019-06-06T12:50:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3RklIZ1FSNllQb2UwS0xTbzBKMzQwaElVZjdURzRTM2tVS25YTEJ3cGlrWW42bWNDZ2MxMjJTUzBTWEczVWh3V2krdXp4Z052MWIySTFYUDM2R0JTNXhEVndpNk9Ld0I0dXUyWGpLK1VLSllqZ3BtVi9IV3M5Nzlka2xuMnN5MVY3YWx2by9McFhiUzRhWGhoOHdqdGFtUE51NzZIbnBzc1IyL3ZPTXY4SGdROWs5WnhBSWxTRjEyUTJhL0tJNStJcG5Ybk5PUFhRRDJlU0VjNG5TaWRRYjNFNmYvY1FNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22950a06-86ce-4f12-9c3c-0527f1a9e912", "record_id": "flaws_cloudtrail:0000378:22950a06-86ce-4f12-9c3c-0527f1a9e912", "row_index": 378, "timestamp": "2019-06-06T12:50:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22950a06-86ce-4f12-9c3c-0527f1a9e912", "eventTime": "2019-06-06T12:50:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3RklIZ1FSNllQb2UwS0xTbzBKMzQwaElVZjdURzRTM2tVS25YTEJ3cGlrWW42bWNDZ2MxMjJTUzBTWEczVWh3V2krdXp4Z052MWIySTFYUDM2R0JTNXhEVndpNk9Ld0I0dXUyWGpLK1VLSllqZ3BtVi9IV3M5Nzlka2xuMnN5MVY3YWx2by9McFhiUzRhWGhoOHdqdGFtUE51NzZIbnBzc1IyL3ZPTXY4SGdROWs5WnhBSWxTRjEyUTJhL0tJNStJcG5Ybk5PUFhRRDJlU0VjNG5TaWRRYjNFNmYvY1FNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d7249f8-28c3-4e52-b2ca-e5733f97654c", "record_id": "flaws_cloudtrail:0000379:1d7249f8-28c3-4e52-b2ca-e5733f97654c", "row_index": 379, "timestamp": "2019-06-06T12:50:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d7249f8-28c3-4e52-b2ca-e5733f97654c", "eventTime": "2019-06-06T12:50:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvN0wrMkZlRTcvaVZ6WElYYXUyOFRDSWYraE55bVJYQnYvRnV4bmJNSVhYQ2JrallxbVlmTTJzeHBzbEU5TmZLME01RlJyMWZ6ZE9hdnpWaDJ6aGh4bjYzM0R1Um5lSUVHUEJzMGt1SW1yd0JtSGtjWHFIYlA2OXNYdUhIM0VzNUk1Q1ZEZWVyaUpCVXVBYy9qVlBQZGZ0RDdtS0R5cmh4K2g2RzVFWTZodkhJNG14YTBtOFpLeWNRVWhYYVRUST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d7249f8-28c3-4e52-b2ca-e5733f97654c", "record_id": "flaws_cloudtrail:0000380:1d7249f8-28c3-4e52-b2ca-e5733f97654c", "row_index": 380, "timestamp": "2019-06-06T12:50:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d7249f8-28c3-4e52-b2ca-e5733f97654c", "eventTime": "2019-06-06T12:50:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvN0wrMkZlRTcvaVZ6WElYYXUyOFRDSWYraE55bVJYQnYvRnV4bmJNSVhYQ2JrallxbVlmTTJzeHBzbEU5TmZLME01RlJyMWZ6ZE9hdnpWaDJ6aGh4bjYzM0R1Um5lSUVHUEJzMGt1SW1yd0JtSGtjWHFIYlA2OXNYdUhIM0VzNUk1Q1ZEZWVyaUpCVXVBYy9qVlBQZGZ0RDdtS0R5cmh4K2g2RzVFWTZodkhJNG14YTBtOFpLeWNRVWhYYVRUST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c378361-6ca6-4e1c-aa18-d1c70514", "record_id": "flaws_cloudtrail:0000381:5c378361-6ca6-4e1c-aa18-d1c70514", "row_index": 381, "timestamp": "2019-06-06T12:50:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c378361-6ca6-4e1c-aa18-d1c70514", "eventTime": "2019-06-06T12:50:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGVlAvS0RLd3VKQ2RtSC8xSytmaGptbXY0V1JjOFFldUhVbFdpeVpuN3Brci9iNmJzbVBJL2gvaWEzcWtOcDZLai9hdW8wb25DREZsdWZBdlU1dE5PSStsZ1ZTMnI3OHJDTXBMbURLcjdWQklIcTBJZTlyOHJmSC96em0xVVhxWjRub1h4TU4ycGlsTit1T3FRaVkxTHhINTlxd1J0K2VEeTBUeU5jMkJ3RXNHVlV5bXV0WWZaZnpOazFJMEZuTFZEUGxPS2NmU1VvREI2cHlQL1I3UU50Uk53aUZqVUE0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c378361-6ca6-4e1c-aa18-d1c70514", "record_id": "flaws_cloudtrail:0000382:5c378361-6ca6-4e1c-aa18-d1c70514", "row_index": 382, "timestamp": "2019-06-06T12:50:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c378361-6ca6-4e1c-aa18-d1c70514", "eventTime": "2019-06-06T12:50:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGVlAvS0RLd3VKQ2RtSC8xSytmaGptbXY0V1JjOFFldUhVbFdpeVpuN3Brci9iNmJzbVBJL2gvaWEzcWtOcDZLai9hdW8wb25DREZsdWZBdlU1dE5PSStsZ1ZTMnI3OHJDTXBMbURLcjdWQklIcTBJZTlyOHJmSC96em0xVVhxWjRub1h4TU4ycGlsTit1T3FRaVkxTHhINTlxd1J0K2VEeTBUeU5jMkJ3RXNHVlV5bXV0WWZaZnpOazFJMEZuTFZEUGxPS2NmU1VvREI2cHlQL1I3UU50Uk53aUZqVUE0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "496921a46-d1c2-411d-aaaa-2fd9affd90e7", "record_id": "flaws_cloudtrail:0000383:496921a46-d1c2-411d-aaaa-2fd9affd90e7", "row_index": 383, "timestamp": "2019-06-06T12:50:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "496921a46-d1c2-411d-aaaa-2fd9affd90e7", "eventTime": "2019-06-06T12:50:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2cXJqRE9vNVlJbUZxaGFGRk1uYUxybTNaT1VnTFU0Rklxdk1JYUFWQS9MK3piQlluREpBdzRpMlY1SnJqb3VXOEs1K1JjK1hoK01YeFNrenhjRzJpWjZhRFVoaHdWNzRBQzl1c1NOQkRSRDgvZDdxWFNIODl3K1dDbWNkUnEyRkJZSEFsZWxUNkNRMXJiY3RJSXdmTmFKRVBYZ3g1SFRaTC9QUmVtTEkreGlURmhtbGhjS29BOE1HRUxhNDFYRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "496921a46-d1c2-411d-aaaa-2fd9affd90e7", "record_id": "flaws_cloudtrail:0000384:496921a46-d1c2-411d-aaaa-2fd9affd90e7", "row_index": 384, "timestamp": "2019-06-06T12:50:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "496921a46-d1c2-411d-aaaa-2fd9affd90e7", "eventTime": "2019-06-06T12:50:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2cXJqRE9vNVlJbUZxaGFGRk1uYUxybTNaT1VnTFU0Rklxdk1JYUFWQS9MK3piQlluREpBdzRpMlY1SnJqb3VXOEs1K1JjK1hoK01YeFNrenhjRzJpWjZhRFVoaHdWNzRBQzl1c1NOQkRSRDgvZDdxWFNIODl3K1dDbWNkUnEyRkJZSEFsZWxUNkNRMXJiY3RJSXdmTmFKRVBYZ3g1SFRaTC9QUmVtTEkreGlURmhtbGhjS29BOE1HRUxhNDFYRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b51f71b4-bf93-4998-89a5-386f340b9e07", "record_id": "flaws_cloudtrail:0000385:b51f71b4-bf93-4998-89a5-386f340b9e07", "row_index": 385, "timestamp": "2019-06-06T12:51:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b51f71b4-bf93-4998-89a5-386f340b9e07", "eventTime": "2019-06-06T12:51:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b51f71b4-bf93-4998-89a5-386f340b9e07", "record_id": "flaws_cloudtrail:0000386:b51f71b4-bf93-4998-89a5-386f340b9e07", "row_index": 386, "timestamp": "2019-06-06T12:51:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b51f71b4-bf93-4998-89a5-386f340b9e07", "eventTime": "2019-06-06T12:51:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dbc12fa-2db1-4a14-842c-98fdd09fd5f6", "record_id": "flaws_cloudtrail:0000387:7dbc12fa-2db1-4a14-842c-98fdd09fd5f6", "row_index": 387, "timestamp": "2019-06-06T12:51:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dbc12fa-2db1-4a14-842c-98fdd09fd5f6", "eventTime": "2019-06-06T12:51:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTV0RySUswSzc5RU9UVnUxTlROWlZrc2tucHk0MlBHdGNOeS8wSGJVd3hqZ3lROUFOKzdMdmo0ZUhXTlpSN2tEWmtaeXBBK0xiUk02cmFpN1RicmtKSWpOZ3MxbjJCUVdNMVMzK1JwUWg1a01BRTRrdVE1S2U1Z2wxeEJkc1NDTWNBTTFCQ25jZXZQNGFBaXVpTzhnOEhlLzBPbjlsTVZhck1BT3VaWmNFamhiblM5Ukw2emFqY25QK2E5ZTk1WERQalE3cENSUzluRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dbc12fa-2db1-4a14-842c-98fdd09fd5f6", "record_id": "flaws_cloudtrail:0000388:7dbc12fa-2db1-4a14-842c-98fdd09fd5f6", "row_index": 388, "timestamp": "2019-06-06T12:51:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dbc12fa-2db1-4a14-842c-98fdd09fd5f6", "eventTime": "2019-06-06T12:51:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTV0RySUswSzc5RU9UVnUxTlROWlZrc2tucHk0MlBHdGNOeS8wSGJVd3hqZ3lROUFOKzdMdmo0ZUhXTlpSN2tEWmtaeXBBK0xiUk02cmFpN1RicmtKSWpOZ3MxbjJCUVdNMVMzK1JwUWg1a01BRTRrdVE1S2U1Z2wxeEJkc1NDTWNBTTFCQ25jZXZQNGFBaXVpTzhnOEhlLzBPbjlsTVZhck1BT3VaWmNFamhiblM5Ukw2emFqY25QK2E5ZTk1WERQalE3cENSUzluRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5632f5a0-327a-4b27-81a1-5afab81e30aa", "record_id": "flaws_cloudtrail:0000389:5632f5a0-327a-4b27-81a1-5afab81e30aa", "row_index": 389, "timestamp": "2019-06-06T12:51:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5632f5a0-327a-4b27-81a1-5afab81e30aa", "eventTime": "2019-06-06T12:51:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2V2l0bk9qSmY0SVJIWno5ZlJXRFdYN1ovQWFjcFJYeDU0NjNadUhuSC9zL1RmbWVUeHFpOXZYS1VQWGVXMVZNWlVQVTVPMjczWHlVTCtHQkxWMURtQUswWTlqbENlS3lzdHdSVGMxU2JvalYwM3RGcWlBaytCUVFLVFc2NEhVNHFWNnIxcmhEbWVWZ1RCWnVadXhHKzJ3Y1M0Yk9xS25QU2Rxbng4WWx1NlFnSndneVM0bjlJSllkQmFQbmZmc1k0TVBWMExrRk5RL1l5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5632f5a0-327a-4b27-81a1-5afab81e30aa", "record_id": "flaws_cloudtrail:0000390:5632f5a0-327a-4b27-81a1-5afab81e30aa", "row_index": 390, "timestamp": "2019-06-06T12:51:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5632f5a0-327a-4b27-81a1-5afab81e30aa", "eventTime": "2019-06-06T12:51:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2V2l0bk9qSmY0SVJIWno5ZlJXRFdYN1ovQWFjcFJYeDU0NjNadUhuSC9zL1RmbWVUeHFpOXZYS1VQWGVXMVZNWlVQVTVPMjczWHlVTCtHQkxWMURtQUswWTlqbENlS3lzdHdSVGMxU2JvalYwM3RGcWlBaytCUVFLVFc2NEhVNHFWNnIxcmhEbWVWZ1RCWnVadXhHKzJ3Y1M0Yk9xS25QU2Rxbng4WWx1NlFnSndneVM0bjlJSllkQmFQbmZmc1k0TVBWMExrRk5RL1l5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "442a95f1-7b99-4438-afcb-04aa91d3d5eb", "record_id": "flaws_cloudtrail:0000391:442a95f1-7b99-4438-afcb-04aa91d3d5eb", "row_index": 391, "timestamp": "2019-06-06T12:51:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "442a95f1-7b99-4438-afcb-04aa91d3d5eb", "eventTime": "2019-06-06T12:51:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiREM4NCtyUGE0YkNWZ3BiRVhvVTRFc2FpMmQrRUJtVFVVZ2FkWERUVzA5MElGN2EyeXBuL3hSaWFrZlJuNm5haERObDc2SU1QV2ovNGRDV0gybHZodXZMdVJ5cDBBZHJUTDNCYUhGeGVkRWpVVGZlSEZnb0Jod0hGODZjelFKMjJKU1JQTUxJM0ZpdWgwTThHdXdUUWZoRjdLQmJnSzNCL1lFMGtGSFpoSU05Y2Q0VTZ2UTdUallZMmJhSVNvdDk0NHdjMGZPTWRRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "442a95f1-7b99-4438-afcb-04aa91d3d5eb", "record_id": "flaws_cloudtrail:0000392:442a95f1-7b99-4438-afcb-04aa91d3d5eb", "row_index": 392, "timestamp": "2019-06-06T12:51:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "442a95f1-7b99-4438-afcb-04aa91d3d5eb", "eventTime": "2019-06-06T12:51:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiREM4NCtyUGE0YkNWZ3BiRVhvVTRFc2FpMmQrRUJtVFVVZ2FkWERUVzA5MElGN2EyeXBuL3hSaWFrZlJuNm5haERObDc2SU1QV2ovNGRDV0gybHZodXZMdVJ5cDBBZHJUTDNCYUhGeGVkRWpVVGZlSEZnb0Jod0hGODZjelFKMjJKU1JQTUxJM0ZpdWgwTThHdXdUUWZoRjdLQmJnSzNCL1lFMGtGSFpoSU05Y2Q0VTZ2UTdUallZMmJhSVNvdDk0NHdjMGZPTWRRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c79ad67-55d4-4bbb-a43c-fc2128091464", "record_id": "flaws_cloudtrail:0000393:4c79ad67-55d4-4bbb-a43c-fc2128091464", "row_index": 393, "timestamp": "2019-06-06T12:51:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c79ad67-55d4-4bbb-a43c-fc2128091464", "eventTime": "2019-06-06T12:51:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCQllCc1hLRXN2elh3cFBxckdZemdCMmFKN0RFRTVzUlM5eUptSUhrbWpPeXJUM3l6NHBLZ0J5eWlKT3hTNi9KdU1qZFQvcVZscENmazlvMzJhcm9TMkpoVVpBeXNYRFNGaGlZakF2MmprQk4vcXEyU1VEUC9rckE4bmJ4R0cwOFo1a29neE9vUGpNM3J0Q0w3bUtPc0IzSExrOVl4SkEwc2xDa1BaVVFJMUdIMHg5QTRNeEU5TUJ4d3ZQTE92cHlZS3M0RXkwWVNabz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c79ad67-55d4-4bbb-a43c-fc2128091464", "record_id": "flaws_cloudtrail:0000394:4c79ad67-55d4-4bbb-a43c-fc2128091464", "row_index": 394, "timestamp": "2019-06-06T12:51:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c79ad67-55d4-4bbb-a43c-fc2128091464", "eventTime": "2019-06-06T12:51:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCQllCc1hLRXN2elh3cFBxckdZemdCMmFKN0RFRTVzUlM5eUptSUhrbWpPeXJUM3l6NHBLZ0J5eWlKT3hTNi9KdU1qZFQvcVZscENmazlvMzJhcm9TMkpoVVpBeXNYRFNGaGlZakF2MmprQk4vcXEyU1VEUC9rckE4bmJ4R0cwOFo1a29neE9vUGpNM3J0Q0w3bUtPc0IzSExrOVl4SkEwc2xDa1BaVVFJMUdIMHg5QTRNeEU5TUJ4d3ZQTE92cHlZS3M0RXkwWVNabz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72732e8c-0c68-4fdb-9cd5-c03ea953426ca", "record_id": "flaws_cloudtrail:0000395:72732e8c-0c68-4fdb-9cd5-c03ea953426ca", "row_index": 395, "timestamp": "2019-06-06T12:51:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72732e8c-0c68-4fdb-9cd5-c03ea953426ca", "eventTime": "2019-06-06T12:51:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYUm9oOE5tdmYveWM2dlBHU0l3NG5qMnNaTXI0TFo3ZlM0SWVoaGtGOEVNbDNxeFlKYUNyM0ovYmJDQVdGZzRnMU42Nk1BNk9vMStPUWNZWG9OVjliZzlpZ2JaV1plajBra2tqVjQrQ1JEY0lORGJFMEs2dmdybi9Wd1hoRXFoUHpoc2RKV2EzRlQ4UkhaWXZpWU9lMmVFWEdXQWlPNUFXZGt2NUNNTytxL1RHZzdDRnZlTzVGbGNjZkdwTkp2RW0xU2pPRFBuMTFsazZyQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72732e8c-0c68-4fdb-9cd5-c03ea953426ca", "record_id": "flaws_cloudtrail:0000396:72732e8c-0c68-4fdb-9cd5-c03ea953426ca", "row_index": 396, "timestamp": "2019-06-06T12:51:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72732e8c-0c68-4fdb-9cd5-c03ea953426ca", "eventTime": "2019-06-06T12:51:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYUm9oOE5tdmYveWM2dlBHU0l3NG5qMnNaTXI0TFo3ZlM0SWVoaGtGOEVNbDNxeFlKYUNyM0ovYmJDQVdGZzRnMU42Nk1BNk9vMStPUWNZWG9OVjliZzlpZ2JaV1plajBra2tqVjQrQ1JEY0lORGJFMEs2dmdybi9Wd1hoRXFoUHpoc2RKV2EzRlQ4UkhaWXZpWU9lMmVFWEdXQWlPNUFXZGt2NUNNTytxL1RHZzdDRnZlTzVGbGNjZkdwTkp2RW0xU2pPRFBuMTFsazZyQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec664b15-aed6-4ae7-9f4f-ac567545430c", "record_id": "flaws_cloudtrail:0000397:ec664b15-aed6-4ae7-9f4f-ac567545430c", "row_index": 397, "timestamp": "2019-06-06T12:51:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec664b15-aed6-4ae7-9f4f-ac567545430c", "eventTime": "2019-06-06T12:51:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOb0t4RitGYzJ2Zkk5bFYyVjB4eWpDU2RkNzhqcTRNMDlWbHRGSm9tVmk1UkFqRzlab0NKVExyQ3BxS3NMaG04NkhQcUcxQmJFSFV5M3p0bWVlVFJ0bndZQ1EyZ0ZtRU15bTNIZm5iNTR2ajVHeWIzbXFTQm9rZUs3Z0Vhbi9XN3VrSDg2dTVWSzVQdFM0VVRReHZhTVpCRi9JeGg1SWRmaTlNS0xSNEE1VlRETHBzcU11RWsvTFNhNUlJZjRjMlV4Q3RLTDZNeWV3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec664b15-aed6-4ae7-9f4f-ac567545430c", "record_id": "flaws_cloudtrail:0000398:ec664b15-aed6-4ae7-9f4f-ac567545430c", "row_index": 398, "timestamp": "2019-06-06T12:51:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec664b15-aed6-4ae7-9f4f-ac567545430c", "eventTime": "2019-06-06T12:51:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOb0t4RitGYzJ2Zkk5bFYyVjB4eWpDU2RkNzhqcTRNMDlWbHRGSm9tVmk1UkFqRzlab0NKVExyQ3BxS3NMaG04NkhQcUcxQmJFSFV5M3p0bWVlVFJ0bndZQ1EyZ0ZtRU15bTNIZm5iNTR2ajVHeWIzbXFTQm9rZUs3Z0Vhbi9XN3VrSDg2dTVWSzVQdFM0VVRReHZhTVpCRi9JeGg1SWRmaTlNS0xSNEE1VlRETHBzcU11RWsvTFNhNUlJZjRjMlV4Q3RLTDZNeWV3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "399b6d9a-915c-4ef0-b745-2cf94d34997", "record_id": "flaws_cloudtrail:0000399:399b6d9a-915c-4ef0-b745-2cf94d34997", "row_index": 399, "timestamp": "2019-06-06T12:51:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "399b6d9a-915c-4ef0-b745-2cf94d34997", "eventTime": "2019-06-06T12:51:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3MUVieXBSNTI4SUdKaWxlM0lPeEdBVTJ6Tzl0am1SckdTOFdQLzh4dnU0cDgzd1Fjbkg3WWpmdGJHQlZlRFpXcXJ6cVJ0YytBNWg0OUVmNE9BaHczRjhEV2l4Qmk0c05kN2xUc240SG9pbVNhUkNRYlc1Q1VhamEzZUo5aVNjWmVoaCtUcklzRDcreER3ek5oOWtsdmFFYmNOaWFtc2lhSEJIK3BrYnhRc3RVS3dKZlZaQzd4TUppQ1grQ3Y5RGtxY3Q1SlV1ejZXekZjQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "399b6d9a-915c-4ef0-b745-2cf94d34997", "record_id": "flaws_cloudtrail:0000400:399b6d9a-915c-4ef0-b745-2cf94d34997", "row_index": 400, "timestamp": "2019-06-06T12:51:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "399b6d9a-915c-4ef0-b745-2cf94d34997", "eventTime": "2019-06-06T12:51:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3MUVieXBSNTI4SUdKaWxlM0lPeEdBVTJ6Tzl0am1SckdTOFdQLzh4dnU0cDgzd1Fjbkg3WWpmdGJHQlZlRFpXcXJ6cVJ0YytBNWg0OUVmNE9BaHczRjhEV2l4Qmk0c05kN2xUc240SG9pbVNhUkNRYlc1Q1VhamEzZUo5aVNjWmVoaCtUcklzRDcreER3ek5oOWtsdmFFYmNOaWFtc2lhSEJIK3BrYnhRc3RVS3dKZlZaQzd4TUppQ1grQ3Y5RGtxY3Q1SlV1ejZXekZjQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60e949d8-b76b-487e-987e-353050344f46", "record_id": "flaws_cloudtrail:0000401:60e949d8-b76b-487e-987e-353050344f46", "row_index": 401, "timestamp": "2019-06-06T12:51:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60e949d8-b76b-487e-987e-353050344f46", "eventTime": "2019-06-06T12:51:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQU0ovS1dUcUZFbmhmUG1GZ056QjJDcW5TOWdEMGlKbmdyRURvaFpqUjZTaTRwc0p3WWVvbmNhVTlQeWc2RHBudm5qaHhQUmIveFJDTmNDYXRHUy9kUEloUlZKcG0rRHJWVUtBUHp6Q0k4VzViNXV4dnJqbVMzRm5Zb2hxNmRzVmZTNGZJL092L05lZkZUMGJIa09DN0NrSlpZbElxSm96WmxSdnBZWHBVbHhNUlF2amx5RHZMejcydDVhVTNHa2oxaGxXNEJnZjQ4Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60e949d8-b76b-487e-987e-353050344f46", "record_id": "flaws_cloudtrail:0000402:60e949d8-b76b-487e-987e-353050344f46", "row_index": 402, "timestamp": "2019-06-06T12:51:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60e949d8-b76b-487e-987e-353050344f46", "eventTime": "2019-06-06T12:51:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQU0ovS1dUcUZFbmhmUG1GZ056QjJDcW5TOWdEMGlKbmdyRURvaFpqUjZTaTRwc0p3WWVvbmNhVTlQeWc2RHBudm5qaHhQUmIveFJDTmNDYXRHUy9kUEloUlZKcG0rRHJWVUtBUHp6Q0k4VzViNXV4dnJqbVMzRm5Zb2hxNmRzVmZTNGZJL092L05lZkZUMGJIa09DN0NrSlpZbElxSm96WmxSdnBZWHBVbHhNUlF2amx5RHZMejcydDVhVTNHa2oxaGxXNEJnZjQ4Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01e1d456-26f3-4ba4-866c-037a63423896", "record_id": "flaws_cloudtrail:0000403:01e1d456-26f3-4ba4-866c-037a63423896", "row_index": 403, "timestamp": "2019-06-06T12:51:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01e1d456-26f3-4ba4-866c-037a63423896", "eventTime": "2019-06-06T12:51:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYUDA2RDRCRlFCRTBVK1p2N21ZanFjZTFyNjBMeFpUZFU2TmpIYU1nMjQ0aGlkYmtRTW9GYnl5K0ZUUjJtMFdvUmtOZmo3VVUxMDV3Y2hhM0JIUTFxc3NZZm9RSGNjVVhMUUlQTDRqTzB6eGUvVEVVNWJGazdvaEhZU1BVbnRhL2dIL2FUY0hVTm1DbFFXNkl5MElRUUUrSEFiTmZkVEN6Q3hRaHpYWTBmOVhsOHVFeWhQTkNLaWtSbVJxeFpTVVpMNldxOC9VWlhYcUZsUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01e1d456-26f3-4ba4-866c-037a63423896", "record_id": "flaws_cloudtrail:0000404:01e1d456-26f3-4ba4-866c-037a63423896", "row_index": 404, "timestamp": "2019-06-06T12:51:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01e1d456-26f3-4ba4-866c-037a63423896", "eventTime": "2019-06-06T12:51:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYUDA2RDRCRlFCRTBVK1p2N21ZanFjZTFyNjBMeFpUZFU2TmpIYU1nMjQ0aGlkYmtRTW9GYnl5K0ZUUjJtMFdvUmtOZmo3VVUxMDV3Y2hhM0JIUTFxc3NZZm9RSGNjVVhMUUlQTDRqTzB6eGUvVEVVNWJGazdvaEhZU1BVbnRhL2dIL2FUY0hVTm1DbFFXNkl5MElRUUUrSEFiTmZkVEN6Q3hRaHpYWTBmOVhsOHVFeWhQTkNLaWtSbVJxeFpTVVpMNldxOC9VWlhYcUZsUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "175304e85-eb03-4716-aca8-3162d48d9d33", "record_id": "flaws_cloudtrail:0000405:175304e85-eb03-4716-aca8-3162d48d9d33", "row_index": 405, "timestamp": "2019-06-06T12:51:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "175304e85-eb03-4716-aca8-3162d48d9d33", "eventTime": "2019-06-06T12:51:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnNzF6bmJhT0hucDVpQUZDZHZZblRCdWIzZ1pYais0a0xsU3VRQjJUc1I1SWpRM1l1N29rK0xnQ1JZaS85ektRQlE5NUdhMlpFVkFibnloYUlrdXV5QkthTGlIZ1NDTURMS0VuSzZMcG9HbkJZMVNzYWRSWmZzR2YydXp4U0R3VXZwc0R3N0FybVBXWTFUcy9jZ016R3JSVTlvalhWdldUdjAvZVNwZWxWUU03Ti9aenVoZHRPNytTbmVVZjdTVW5hWjJDZkNNTHplVENHdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "175304e85-eb03-4716-aca8-3162d48d9d33", "record_id": "flaws_cloudtrail:0000406:175304e85-eb03-4716-aca8-3162d48d9d33", "row_index": 406, "timestamp": "2019-06-06T12:51:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "175304e85-eb03-4716-aca8-3162d48d9d33", "eventTime": "2019-06-06T12:51:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnNzF6bmJhT0hucDVpQUZDZHZZblRCdWIzZ1pYais0a0xsU3VRQjJUc1I1SWpRM1l1N29rK0xnQ1JZaS85ektRQlE5NUdhMlpFVkFibnloYUlrdXV5QkthTGlIZ1NDTURMS0VuSzZMcG9HbkJZMVNzYWRSWmZzR2YydXp4U0R3VXZwc0R3N0FybVBXWTFUcy9jZ016R3JSVTlvalhWdldUdjAvZVNwZWxWUU03Ti9aenVoZHRPNytTbmVVZjdTVW5hWjJDZkNNTHplVENHdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f41dffb0-245a-4db8-84fe-758979095493", "record_id": "flaws_cloudtrail:0000407:f41dffb0-245a-4db8-84fe-758979095493", "row_index": 407, "timestamp": "2019-06-06T12:51:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f41dffb0-245a-4db8-84fe-758979095493", "eventTime": "2019-06-06T12:51:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIL21mUXE4eG9QUUdub3R4NEcwUDJtVldTZlZGWUZ3TWZiSk5uL1NoRmxBQXo3TzRaUmx3RkswVm11Z1poakYyT2NIZjZtYVc4UnBsR2hGKzVJbVlsbDVjTVFVQmNQRXNZSHNWRzRMSUVTY21CLzJHUGUyRExxdU1xS1ZZL3NNYmdqcUFDcXRXelFBQWYyMVVPZjhuQXEyaFh1c0FGZUxrVmVjNEtITnIycjBucXp6SkJPREVwNkl4T25wSXJOdTNXYVE3OWM0cFp0QXFSUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f41dffb0-245a-4db8-84fe-758979095493", "record_id": "flaws_cloudtrail:0000408:f41dffb0-245a-4db8-84fe-758979095493", "row_index": 408, "timestamp": "2019-06-06T12:51:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f41dffb0-245a-4db8-84fe-758979095493", "eventTime": "2019-06-06T12:51:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIL21mUXE4eG9QUUdub3R4NEcwUDJtVldTZlZGWUZ3TWZiSk5uL1NoRmxBQXo3TzRaUmx3RkswVm11Z1poakYyT2NIZjZtYVc4UnBsR2hGKzVJbVlsbDVjTVFVQmNQRXNZSHNWRzRMSUVTY21CLzJHUGUyRExxdU1xS1ZZL3NNYmdqcUFDcXRXelFBQWYyMVVPZjhuQXEyaFh1c0FGZUxrVmVjNEtITnIycjBucXp6SkJPREVwNkl4T25wSXJOdTNXYVE3OWM0cFp0QXFSUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edfb2466-366d-4f1b-8aed-fb14c8a750e5", "record_id": "flaws_cloudtrail:0000409:edfb2466-366d-4f1b-8aed-fb14c8a750e5", "row_index": 409, "timestamp": "2019-06-06T12:51:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edfb2466-366d-4f1b-8aed-fb14c8a750e5", "eventTime": "2019-06-06T12:51:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKcFNOMzU2a3RjdWFxb09LVHJITm1ib2ZQTGkzZTA4N0szM0JyZ3U1MEFyMmxmS0tJMmo1TnJyTHloZ1AyaFd1Q3cvVTVNMVdZaXZxZklWbzNTTWdUb3F5RTcyQlZkUjNUOTVxVVRpREwrNHZtTXJkT3FyMnN4VTU1VEtDcURacEZQdjhndEJtVUpCK0tuSmVuSGtKdktKQVNRYlZKMk5qQ1lVb2sxRmJlaUt5b3RKUGlVbHh2aFZyV3p4Z2VaR0p3THpaN1Izekhxc2Nldz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edfb2466-366d-4f1b-8aed-fb14c8a750e5", "record_id": "flaws_cloudtrail:0000410:edfb2466-366d-4f1b-8aed-fb14c8a750e5", "row_index": 410, "timestamp": "2019-06-06T12:51:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edfb2466-366d-4f1b-8aed-fb14c8a750e5", "eventTime": "2019-06-06T12:51:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKcFNOMzU2a3RjdWFxb09LVHJITm1ib2ZQTGkzZTA4N0szM0JyZ3U1MEFyMmxmS0tJMmo1TnJyTHloZ1AyaFd1Q3cvVTVNMVdZaXZxZklWbzNTTWdUb3F5RTcyQlZkUjNUOTVxVVRpREwrNHZtTXJkT3FyMnN4VTU1VEtDcURacEZQdjhndEJtVUpCK0tuSmVuSGtKdktKQVNRYlZKMk5qQ1lVb2sxRmJlaUt5b3RKUGlVbHh2aFZyV3p4Z2VaR0p3THpaN1Izekhxc2Nldz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8a69d67-0dce-4b5a-826d-edb2a7aca001", "record_id": "flaws_cloudtrail:0000411:f8a69d67-0dce-4b5a-826d-edb2a7aca001", "row_index": 411, "timestamp": "2019-06-06T12:52:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8a69d67-0dce-4b5a-826d-edb2a7aca001", "eventTime": "2019-06-06T12:52:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxQ05NVi9aWjRuVEZlaTdKVmN4OUN2dEhKUTZibWVNNlNkVXEzNEZ0NnMvOVQzQjVjMHBHUFBYa3Z6WVdyZVJMam9WS1RPMENjcXNuelhlTUs2RkE3SFZWU3ovZDBvanNFbC9mTlZwcDZzcTFZVlNETnJtRlIyNXE2RDRiMm5UTUpCUGJJQzlSWXVGMmFONGt2ZzR4MzFDZWhGWVlOZzd1dWxlc3RSUmhsV2JWcENMYXlwakhyZi8xVGkxa0xoSks4eC9vVkFZb2h5RT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8a69d67-0dce-4b5a-826d-edb2a7aca001", "record_id": "flaws_cloudtrail:0000412:f8a69d67-0dce-4b5a-826d-edb2a7aca001", "row_index": 412, "timestamp": "2019-06-06T12:52:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8a69d67-0dce-4b5a-826d-edb2a7aca001", "eventTime": "2019-06-06T12:52:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxQ05NVi9aWjRuVEZlaTdKVmN4OUN2dEhKUTZibWVNNlNkVXEzNEZ0NnMvOVQzQjVjMHBHUFBYa3Z6WVdyZVJMam9WS1RPMENjcXNuelhlTUs2RkE3SFZWU3ovZDBvanNFbC9mTlZwcDZzcTFZVlNETnJtRlIyNXE2RDRiMm5UTUpCUGJJQzlSWXVGMmFONGt2ZzR4MzFDZWhGWVlOZzd1dWxlc3RSUmhsV2JWcENMYXlwakhyZi8xVGkxa0xoSks4eC9vVkFZb2h5RT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdee3649-84fd-4757-813f-9f32ce39cfdb", "record_id": "flaws_cloudtrail:0000413:bdee3649-84fd-4757-813f-9f32ce39cfdb", "row_index": 413, "timestamp": "2019-06-06T12:52:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdee3649-84fd-4757-813f-9f32ce39cfdb", "eventTime": "2019-06-06T12:52:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYaUMxTzg2bytnNUNoWExXSlFlVm53bm1YLzJKbDBqRi9BZTBEVndGOWR4NnFtd3BCOTUwTGR0N2l3bVRZS3JtbjJ5Z2RhekNSdWJuZzQrU0d5QVVXT2lwbUJOQmova2ZqblZhMDhIbGU0YTk2c25XcTE5ZFFCUytaRm9QekYvdnJWNlduU2ZDUm5hRVVGdUY0bTFvK0lPSWl5OEl1T1JDQU51MU9xODNncjN1SVJRNDQwV1E0MFNyeG5GOUJvajRPdExyZ3JUZWFlc2J1RTROYWFEanlOOHYxU1UyU0l3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdee3649-84fd-4757-813f-9f32ce39cfdb", "record_id": "flaws_cloudtrail:0000414:bdee3649-84fd-4757-813f-9f32ce39cfdb", "row_index": 414, "timestamp": "2019-06-06T12:52:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdee3649-84fd-4757-813f-9f32ce39cfdb", "eventTime": "2019-06-06T12:52:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYaUMxTzg2bytnNUNoWExXSlFlVm53bm1YLzJKbDBqRi9BZTBEVndGOWR4NnFtd3BCOTUwTGR0N2l3bVRZS3JtbjJ5Z2RhekNSdWJuZzQrU0d5QVVXT2lwbUJOQmova2ZqblZhMDhIbGU0YTk2c25XcTE5ZFFCUytaRm9QekYvdnJWNlduU2ZDUm5hRVVGdUY0bTFvK0lPSWl5OEl1T1JDQU51MU9xODNncjN1SVJRNDQwV1E0MFNyeG5GOUJvajRPdExyZ3JUZWFlc2J1RTROYWFEanlOOHYxU1UyU0l3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a4456c3-3267-4f9f-910a-bcfaa4755697", "record_id": "flaws_cloudtrail:0000415:3a4456c3-3267-4f9f-910a-bcfaa4755697", "row_index": 415, "timestamp": "2019-06-06T12:52:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a4456c3-3267-4f9f-910a-bcfaa4755697", "eventTime": "2019-06-06T12:52:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqV0JpZGNJanJoZTRlRXh5WnlwK2g2ek9HMXlCalR4czBHWTJtdXNFbDV1SEtmNjFCSmNmVXB3MHc5ZFpoTkE5c2VLL2Zhdm8wTU56U2c5djBKQXkwcnlIekVmNmNRVVg3WEU5MGEvV0p1REhvbTZoZHBFb3hyRDBNWTROb3IyRUlabUdId3FuWGNPSk5IVk0wSzlPRGdkSFFTaEQ4WlBDcXYrdXVHaG1BMnRrRGs1MFlSaU5mVTFlaWlUQVk0WT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a4456c3-3267-4f9f-910a-bcfaa4755697", "record_id": "flaws_cloudtrail:0000416:3a4456c3-3267-4f9f-910a-bcfaa4755697", "row_index": 416, "timestamp": "2019-06-06T12:52:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a4456c3-3267-4f9f-910a-bcfaa4755697", "eventTime": "2019-06-06T12:52:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqV0JpZGNJanJoZTRlRXh5WnlwK2g2ek9HMXlCalR4czBHWTJtdXNFbDV1SEtmNjFCSmNmVXB3MHc5ZFpoTkE5c2VLL2Zhdm8wTU56U2c5djBKQXkwcnlIekVmNmNRVVg3WEU5MGEvV0p1REhvbTZoZHBFb3hyRDBNWTROb3IyRUlabUdId3FuWGNPSk5IVk0wSzlPRGdkSFFTaEQ4WlBDcXYrdXVHaG1BMnRrRGs1MFlSaU5mVTFlaWlUQVk0WT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5732acae-afef-4ba0-8afd-d5e3ce45ab7a", "record_id": "flaws_cloudtrail:0000417:5732acae-afef-4ba0-8afd-d5e3ce45ab7a", "row_index": 417, "timestamp": "2019-06-06T12:52:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5732acae-afef-4ba0-8afd-d5e3ce45ab7a", "eventTime": "2019-06-06T12:52:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDdGFRb05aazhyTlR1K3piUVJ1VEtYTjdBSHdFb05qMkUraHRBNXhIMGEyL0FDYkpkVm5UeVhrV3pDMEFGMEJHWjhSN0ZMYUZzUHB3R3RnYlM4R3ZIbWlTWEw1NmJHMVhoNllBQTBHekQ5U0dxVzNwaFlWUUQySnM0cGxrTEJIbkptWjJuV3N0SVhJV2Eyb3ZtdmlDNVcwWFJEV0h1L1dSaHRyREY2L05peExJOWUwWXdoUVQ2SXhUQUlkY0hxb1RZUmxGOHQ2ZHJldDZmeVM3SWN1ZmRIckJlQXVsSEEwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5732acae-afef-4ba0-8afd-d5e3ce45ab7a", "record_id": "flaws_cloudtrail:0000418:5732acae-afef-4ba0-8afd-d5e3ce45ab7a", "row_index": 418, "timestamp": "2019-06-06T12:52:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5732acae-afef-4ba0-8afd-d5e3ce45ab7a", "eventTime": "2019-06-06T12:52:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDdGFRb05aazhyTlR1K3piUVJ1VEtYTjdBSHdFb05qMkUraHRBNXhIMGEyL0FDYkpkVm5UeVhrV3pDMEFGMEJHWjhSN0ZMYUZzUHB3R3RnYlM4R3ZIbWlTWEw1NmJHMVhoNllBQTBHekQ5U0dxVzNwaFlWUUQySnM0cGxrTEJIbkptWjJuV3N0SVhJV2Eyb3ZtdmlDNVcwWFJEV0h1L1dSaHRyREY2L05peExJOWUwWXdoUVQ2SXhUQUlkY0hxb1RZUmxGOHQ2ZHJldDZmeVM3SWN1ZmRIckJlQXVsSEEwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10a03d8f-7b93-4573-93b5-3fa0f70b0b99", "record_id": "flaws_cloudtrail:0000419:10a03d8f-7b93-4573-93b5-3fa0f70b0b99", "row_index": 419, "timestamp": "2019-06-06T12:52:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10a03d8f-7b93-4573-93b5-3fa0f70b0b99", "eventTime": "2019-06-06T12:52:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyOWxseDZDVmZReVorRS9OS3BjaEJDNkFlOG5VeC9MMW5wLzlPY0U2MkZ5R3BWeHF4b2pPRDJhMjVQZ04ydEE1eUpFNjJsS1lsVTZwcnU2dFVlVHJobk52a2lTNnU2bVI2Vit6UDMvTjFpQVVldHpxa3IwS1ZmclBQU3JCNExOLzFXZ2ZFLytKeXBrdVdYRyt3bFZ6cVlkMnJDeEszVUFjbGNleFJvWWxBWS9McXdsTDBUTkprSEFxMld3Q2o5bz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ed2acec-e986-4b7f-978c-a3cc8e591e1b", "record_id": "flaws_cloudtrail:0000420:3ed2acec-e986-4b7f-978c-a3cc8e591e1b", "row_index": 420, "timestamp": "2019-06-06T12:52:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ed2acec-e986-4b7f-978c-a3cc8e591e1b", "eventTime": "2019-06-06T12:52:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVSVk4NDU5WnE4TkI3bUUxWWt2azFZRDFOQXRub094THN1MXVIYnAzUWRVOU9XdDV4d2s1Ni9Nb1lteUlMNWl2dlVUNUN3VjdmeU5JRmQ1NVcrazM2WHZ4a3IvMDZZTHozL2FCK2UvS3k1WVVYOUtTaTdPS0EyVDNKWGowOUsybEFmZU85QmgveC9aWHVjWklhVzNTTThuL0tkN3NYYjRJUjlXSVhKOThnTFRNdExHWEFOQ1pNZUx0M1hrMndzOXA1TXBidEpFbTRIaStKbjhoWHBGeHFjRWhmZGR0ZlRNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10a03d8f-7b93-4573-93b5-3fa0f70b0b99", "record_id": "flaws_cloudtrail:0000421:10a03d8f-7b93-4573-93b5-3fa0f70b0b99", "row_index": 421, "timestamp": "2019-06-06T12:52:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10a03d8f-7b93-4573-93b5-3fa0f70b0b99", "eventTime": "2019-06-06T12:52:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyOWxseDZDVmZReVorRS9OS3BjaEJDNkFlOG5VeC9MMW5wLzlPY0U2MkZ5R3BWeHF4b2pPRDJhMjVQZ04ydEE1eUpFNjJsS1lsVTZwcnU2dFVlVHJobk52a2lTNnU2bVI2Vit6UDMvTjFpQVVldHpxa3IwS1ZmclBQU3JCNExOLzFXZ2ZFLytKeXBrdVdYRyt3bFZ6cVlkMnJDeEszVUFjbGNleFJvWWxBWS9McXdsTDBUTkprSEFxMld3Q2o5bz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ed2acec-e986-4b7f-978c-a3cc8e591e1b", "record_id": "flaws_cloudtrail:0000422:3ed2acec-e986-4b7f-978c-a3cc8e591e1b", "row_index": 422, "timestamp": "2019-06-06T12:52:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ed2acec-e986-4b7f-978c-a3cc8e591e1b", "eventTime": "2019-06-06T12:52:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVSVk4NDU5WnE4TkI3bUUxWWt2azFZRDFOQXRub094THN1MXVIYnAzUWRVOU9XdDV4d2s1Ni9Nb1lteUlMNWl2dlVUNUN3VjdmeU5JRmQ1NVcrazM2WHZ4a3IvMDZZTHozL2FCK2UvS3k1WVVYOUtTaTdPS0EyVDNKWGowOUsybEFmZU85QmgveC9aWHVjWklhVzNTTThuL0tkN3NYYjRJUjlXSVhKOThnTFRNdExHWEFOQ1pNZUx0M1hrMndzOXA1TXBidEpFbTRIaStKbjhoWHBGeHFjRWhmZGR0ZlRNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac8e082f-9278-4bf0-9a89-9fc9482ac333", "record_id": "flaws_cloudtrail:0000423:ac8e082f-9278-4bf0-9a89-9fc9482ac333", "row_index": 423, "timestamp": "2019-06-06T12:52:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac8e082f-9278-4bf0-9a89-9fc9482ac333", "eventTime": "2019-06-06T12:52:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvRzBHMmFpUlNHUjJrYWxjZ3pLbitOMzV3bDJoNEE4WU50YkNMSjJpNk85bDRWanhGQ0Z3a1ZQMENZWTJ6TzNHSGFVTmoyU0NyUnF1RW5YQ3JSRml1MjRqNlo4MkdEV1FtNHc4SnB2elo3Y00zQlJ3WWttNk5yK1dGR3VjdytpTlBtL3NwbnRvdG1BRVdnc3E3Q3RkelVwTzJneC9LcXQrczRmTXR2MU95Sk45Z01SUlRjdVFTOXVLYmNLTlZQND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db89718-3c94-4492-8abf-976e07266c1a", "record_id": "flaws_cloudtrail:0000424:db89718-3c94-4492-8abf-976e07266c1a", "row_index": 424, "timestamp": "2019-06-06T12:52:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db89718-3c94-4492-8abf-976e07266c1a", "eventTime": "2019-06-06T12:52:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJbjM2Q1M4RlBRYVhWMThRQ1ZVVDdzWU5zMTI4bi9aMVlZS05iWTdJWmlWa1RmZ3Nub1hhWHRPRmVTazFubXJGNmh3SjlUdjBHVDRkOWRGVVhmVGw3ZWRqZ2cwKzJwQjlhN3p4QjRMcHFTM1lpeWdYNXlHbHdTNWMvd2ZXb0k0Rmg2WnBNYmFiMzVNR1grYWpJaGJQdkF2QW54U0gxMFpZRG5heXlZTFBLdnFiSlRyVFJHb0h4dHhGNWhwcEszM3M5QWZjOXVZbUV5UnkxaS9oclN2dm1DejJISFZJQU00PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac8e082f-9278-4bf0-9a89-9fc9482ac333", "record_id": "flaws_cloudtrail:0000425:ac8e082f-9278-4bf0-9a89-9fc9482ac333", "row_index": 425, "timestamp": "2019-06-06T12:52:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac8e082f-9278-4bf0-9a89-9fc9482ac333", "eventTime": "2019-06-06T12:52:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvRzBHMmFpUlNHUjJrYWxjZ3pLbitOMzV3bDJoNEE4WU50YkNMSjJpNk85bDRWanhGQ0Z3a1ZQMENZWTJ6TzNHSGFVTmoyU0NyUnF1RW5YQ3JSRml1MjRqNlo4MkdEV1FtNHc4SnB2elo3Y00zQlJ3WWttNk5yK1dGR3VjdytpTlBtL3NwbnRvdG1BRVdnc3E3Q3RkelVwTzJneC9LcXQrczRmTXR2MU95Sk45Z01SUlRjdVFTOXVLYmNLTlZQND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db89718-3c94-4492-8abf-976e07266c1a", "record_id": "flaws_cloudtrail:0000426:db89718-3c94-4492-8abf-976e07266c1a", "row_index": 426, "timestamp": "2019-06-06T12:52:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db89718-3c94-4492-8abf-976e07266c1a", "eventTime": "2019-06-06T12:52:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJbjM2Q1M4RlBRYVhWMThRQ1ZVVDdzWU5zMTI4bi9aMVlZS05iWTdJWmlWa1RmZ3Nub1hhWHRPRmVTazFubXJGNmh3SjlUdjBHVDRkOWRGVVhmVGw3ZWRqZ2cwKzJwQjlhN3p4QjRMcHFTM1lpeWdYNXlHbHdTNWMvd2ZXb0k0Rmg2WnBNYmFiMzVNR1grYWpJaGJQdkF2QW54U0gxMFpZRG5heXlZTFBLdnFiSlRyVFJHb0h4dHhGNWhwcEszM3M5QWZjOXVZbUV5UnkxaS9oclN2dm1DejJISFZJQU00PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef6cf372-4138-4658-a80a-106bf9b37416", "record_id": "flaws_cloudtrail:0000427:ef6cf372-4138-4658-a80a-106bf9b37416", "row_index": 427, "timestamp": "2019-06-06T12:52:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef6cf372-4138-4658-a80a-106bf9b37416", "eventTime": "2019-06-06T12:52:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "160eafb2-55dc-490a-b0ef-a9730747d1bd", "record_id": "flaws_cloudtrail:0000428:160eafb2-55dc-490a-b0ef-a9730747d1bd", "row_index": 428, "timestamp": "2019-06-06T12:52:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "160eafb2-55dc-490a-b0ef-a9730747d1bd", "eventTime": "2019-06-06T12:52:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvdHdLOEovL094am1tTXF4R3hFWUYwY0dic28wT1hDTkpQU3MwaTVsRExsaERCZE9RaVI1Z1ZzRm9MWTRiVVMrM3pUSEdLazZGeC9uc09SaldsMEg4RjFDSGRRVDFoRlY1VVJTL092ZHJlQmFnWGdENjZTb3FsMDFKaWhzK2hza1NPSTFMblhjdFBaUXlKbjN5bWwwdUYyR1M0OG5xUllpY09jZzZ5dTFDM2VRWVYvT3JoQndxN3BYWHV5VjUwOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78e3b254-bc6c-4217-a2d1-b5d8c5e5bbea", "record_id": "flaws_cloudtrail:0000429:78e3b254-bc6c-4217-a2d1-b5d8c5e5bbea", "row_index": 429, "timestamp": "2019-06-06T12:52:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78e3b254-bc6c-4217-a2d1-b5d8c5e5bbea", "eventTime": "2019-06-06T12:52:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxbVc1WDQ3NzJRaEI3bXc0VHgwbEkrVnpnSDJ6OEMwRzVWRkZONm5wWXV3SlpGc3RMSlpmTmdYUnc4V0pOM3gyUEU2amx2U3J4bjdmNGdUQ01wQi92ZVYyRDJXcmhyQWZZblBpSEovZWFXTy83anc1Y3JNbWxlaDdCd3BZYU9xNFBsVThIVHRMdm5iU2c5NStJOVJRMEp2ZUt2dm1vZDE0VWJzTHdiMWJzS2lLNW9veThFaUJrTVg1WWUrY1FDUXVsWnh2S1h6SFRkd2Z5YUpENmpOcTJLYU5VYk5DSFpjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef6cf372-4138-4658-a80a-106bf9b37416", "record_id": "flaws_cloudtrail:0000430:ef6cf372-4138-4658-a80a-106bf9b37416", "row_index": 430, "timestamp": "2019-06-06T12:52:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef6cf372-4138-4658-a80a-106bf9b37416", "eventTime": "2019-06-06T12:52:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "160eafb2-55dc-490a-b0ef-a9730747d1bd", "record_id": "flaws_cloudtrail:0000431:160eafb2-55dc-490a-b0ef-a9730747d1bd", "row_index": 431, "timestamp": "2019-06-06T12:52:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "160eafb2-55dc-490a-b0ef-a9730747d1bd", "eventTime": "2019-06-06T12:52:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvdHdLOEovL094am1tTXF4R3hFWUYwY0dic28wT1hDTkpQU3MwaTVsRExsaERCZE9RaVI1Z1ZzRm9MWTRiVVMrM3pUSEdLazZGeC9uc09SaldsMEg4RjFDSGRRVDFoRlY1VVJTL092ZHJlQmFnWGdENjZTb3FsMDFKaWhzK2hza1NPSTFMblhjdFBaUXlKbjN5bWwwdUYyR1M0OG5xUllpY09jZzZ5dTFDM2VRWVYvT3JoQndxN3BYWHV5VjUwOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78e3b254-bc6c-4217-a2d1-b5d8c5e5bbea", "record_id": "flaws_cloudtrail:0000432:78e3b254-bc6c-4217-a2d1-b5d8c5e5bbea", "row_index": 432, "timestamp": "2019-06-06T12:52:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78e3b254-bc6c-4217-a2d1-b5d8c5e5bbea", "eventTime": "2019-06-06T12:52:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxbVc1WDQ3NzJRaEI3bXc0VHgwbEkrVnpnSDJ6OEMwRzVWRkZONm5wWXV3SlpGc3RMSlpmTmdYUnc4V0pOM3gyUEU2amx2U3J4bjdmNGdUQ01wQi92ZVYyRDJXcmhyQWZZblBpSEovZWFXTy83anc1Y3JNbWxlaDdCd3BZYU9xNFBsVThIVHRMdm5iU2c5NStJOVJRMEp2ZUt2dm1vZDE0VWJzTHdiMWJzS2lLNW9veThFaUJrTVg1WWUrY1FDUXVsWnh2S1h6SFRkd2Z5YUpENmpOcTJLYU5VYk5DSFpjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6dd6663-ae3a-497f-8941-b3b64e8071c1", "record_id": "flaws_cloudtrail:0000433:d6dd6663-ae3a-497f-8941-b3b64e8071c1", "row_index": 433, "timestamp": "2019-06-06T12:52:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6dd6663-ae3a-497f-8941-b3b64e8071c1", "eventTime": "2019-06-06T12:52:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZUkk0NGtnUjkyRTkraHFlREhnNFhEQThqM1ozbU1mdk52T0IzbDVZQjZrWHBGT0xiZTJRNm9pWko3Z0FVMGFCZ29ZOEhQVkNieEtRV3ZScEl6cEUxelFkV25IRGs4dnkxTUx5Q1RNVkttYnhKSjRsKzVacWEvWkN5Y3RuUVZqQytSOFFOeHpxSnRPbnBDbENnMGxobHNoQzJLanFvR21JVDEzalQwaFk3emNacExsd0xNSXBXTTRSdHJLcGZZTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6dd6663-ae3a-497f-8941-b3b64e8071c1", "record_id": "flaws_cloudtrail:0000434:d6dd6663-ae3a-497f-8941-b3b64e8071c1", "row_index": 434, "timestamp": "2019-06-06T12:52:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6dd6663-ae3a-497f-8941-b3b64e8071c1", "eventTime": "2019-06-06T12:52:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZUkk0NGtnUjkyRTkraHFlREhnNFhEQThqM1ozbU1mdk52T0IzbDVZQjZrWHBGT0xiZTJRNm9pWko3Z0FVMGFCZ29ZOEhQVkNieEtRV3ZScEl6cEUxelFkV25IRGs4dnkxTUx5Q1RNVkttYnhKSjRsKzVacWEvWkN5Y3RuUVZqQytSOFFOeHpxSnRPbnBDbENnMGxobHNoQzJLanFvR21JVDEzalQwaFk3emNacExsd0xNSXBXTTRSdHJLcGZZTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d15d98df-477b-4ebf-950f-3621c7a6790e", "record_id": "flaws_cloudtrail:0000435:d15d98df-477b-4ebf-950f-3621c7a6790e", "row_index": 435, "timestamp": "2019-06-06T12:53:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d15d98df-477b-4ebf-950f-3621c7a6790e", "eventTime": "2019-06-06T12:53:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d15d98df-477b-4ebf-950f-3621c7a6790e", "record_id": "flaws_cloudtrail:0000436:d15d98df-477b-4ebf-950f-3621c7a6790e", "row_index": 436, "timestamp": "2019-06-06T12:53:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d15d98df-477b-4ebf-950f-3621c7a6790e", "eventTime": "2019-06-06T12:53:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.16.172 Python/3.7.3 Linux/4.19.0-kali5-amd64 botocore/1.12.162", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fbd262b-c824-4682-906b-630cce17622a", "record_id": "flaws_cloudtrail:0000437:1fbd262b-c824-4682-906b-630cce17622a", "row_index": 437, "timestamp": "2019-06-06T12:56:18Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA56BCMR5YXN2O8T9N", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "253.8.134.6", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fbd262b-c824-4682-906b-630cce17622a", "eventTime": "2019-06-06T12:56:18Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.8.134.6", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA56BCMR5YXN2O8T9N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-06T12:27:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/06/06/[$LATEST]b64bbe9c786f5bb52cd3b5329b1ad69d", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e6c70d9-c6bf-48df-84b5-873bb207256c", "record_id": "flaws_cloudtrail:0000438:3e6c70d9-c6bf-48df-84b5-873bb207256c", "row_index": 438, "timestamp": "2019-06-06T12:56:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1607, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e6c70d9-c6bf-48df-84b5-873bb207256c", "eventTime": "2019-06-06T12:56:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAP3KV4I0QH67189R5", "expiration": "Jun 7, 2019 12:56:18 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fbd262b-c824-4682-906b-630cce17622a", "record_id": "flaws_cloudtrail:0000439:1fbd262b-c824-4682-906b-630cce17622a", "row_index": 439, "timestamp": "2019-06-06T12:56:18Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA56BCMR5YXN2O8T9N", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "253.8.134.6", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fbd262b-c824-4682-906b-630cce17622a", "eventTime": "2019-06-06T12:56:18Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.8.134.6", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA56BCMR5YXN2O8T9N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-06T12:27:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/06/06/[$LATEST]b64bbe9c786f5bb52cd3b5329b1ad69d", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e6c70d9-c6bf-48df-84b5-873bb207256c", "record_id": "flaws_cloudtrail:0000440:3e6c70d9-c6bf-48df-84b5-873bb207256c", "row_index": 440, "timestamp": "2019-06-06T12:56:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1607, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e6c70d9-c6bf-48df-84b5-873bb207256c", "eventTime": "2019-06-06T12:56:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAP3KV4I0QH67189R5", "expiration": "Jun 7, 2019 12:56:18 AM", "sessionToken": "AgoJb3JpZ2luX2VjEAUaCXVzLXdlc3QtMiJHMEUCIGNq/Mld+Ltqjeeh7vgHjIVJby14D14e9o3z20hXHysBAiEA8wm9P6hzmEOZS0h6zj0T/nACbfcsN8796iaaRpUJuL0qggIILhAAGgw5NzU0MjYyNjIwMjkiDOuD0XvLv/k8UxmNRirfAVCEPuqkeGZIVUpbEDriKipn3jtLZkE/686YY8tXSR00tvj9aaN5X/Q8BqamnxTu39ZjWkXJNCQR8T98+4zfPrv03V7HCCiuD4ZMdw7jypoFO/eotqVOW/SKIiiyypDC+bSVaetkOWjsikstRq/GllmjmxDw8vwQew8fJ0+kJjffKRx7gWP4nEYyW45qD6fhGybMA1sMpPpg3fo8yzrQGPuXqmOrZDLzIBjSSQ+KfGHYlMTysMzjzYgn74+IBgGPkE0GeDTvsW19L4J+MdLgiGyDBj16TDxugcFzEDdOBcEw8prk5wU6tAFVVbLSiMDFlArG3Z7vkxhTRXILkgn+I5XPckAMMUfL988otGyAhy5dv8LrQS60kJooF3CRyhsCqGm8ve/BWKgsY/aXtlTpCCvmARTN9Zbai0+1/iYaa+Lvj+hLNaBRGfdsVKFJU/3w1N3mDQvphhb3dXeQ76hwcDZs6IbDZqvD5LsHSZnfSABKki6o2hD2m8HFctTXXpLoNu2pM9JP5DUl32f3ndvD3SN1HaRCcbuOPgkiQ7w="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d30ff0e8-e4de-4934-9790-b0db4dbafafb", "record_id": "flaws_cloudtrail:0000441:d30ff0e8-e4de-4934-9790-b0db4dbafafb", "row_index": 441, "timestamp": "2019-06-06T13:01:45Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d30ff0e8-e4de-4934-9790-b0db4dbafafb", "eventTime": "2019-06-06T13:01:45Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d30ff0e8-e4de-4934-9790-b0db4dbafafb", "record_id": "flaws_cloudtrail:0000442:d30ff0e8-e4de-4934-9790-b0db4dbafafb", "row_index": 442, "timestamp": "2019-06-06T13:01:45Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d30ff0e8-e4de-4934-9790-b0db4dbafafb", "eventTime": "2019-06-06T13:01:45Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76eeea36-d3f8-4b3a-b08e-27cd8a0a7692", "record_id": "flaws_cloudtrail:0000443:76eeea36-d3f8-4b3a-b08e-27cd8a0a7692", "row_index": 443, "timestamp": "2019-06-06T13:06:02Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76eeea36-d3f8-4b3a-b08e-27cd8a0a7692", "eventTime": "2019-06-06T13:06:02Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name flaws cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76eeea36-d3f8-4b3a-b08e-27cd8a0a7692", "record_id": "flaws_cloudtrail:0000444:76eeea36-d3f8-4b3a-b08e-27cd8a0a7692", "row_index": 444, "timestamp": "2019-06-06T13:06:02Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76eeea36-d3f8-4b3a-b08e-27cd8a0a7692", "eventTime": "2019-06-06T13:06:02Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name flaws cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7aa73b4-3f5d-4f65-b03d-70036ff864c3", "record_id": "flaws_cloudtrail:0000445:f7aa73b4-3f5d-4f65-b03d-70036ff864c3", "row_index": 445, "timestamp": "2019-06-06T13:06:14Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7aa73b4-3f5d-4f65-b03d-70036ff864c3", "eventTime": "2019-06-06T13:06:14Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name level5 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7aa73b4-3f5d-4f65-b03d-70036ff864c3", "record_id": "flaws_cloudtrail:0000446:f7aa73b4-3f5d-4f65-b03d-70036ff864c3", "row_index": 446, "timestamp": "2019-06-06T13:06:14Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7aa73b4-3f5d-4f65-b03d-70036ff864c3", "eventTime": "2019-06-06T13:06:14Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name level5 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fc76d27-2348-44bd-bee9-fc6ce014e202", "record_id": "flaws_cloudtrail:0000447:5fc76d27-2348-44bd-bee9-fc6ce014e202", "row_index": 447, "timestamp": "2019-06-06T13:06:19Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fc76d27-2348-44bd-bee9-fc6ce014e202", "eventTime": "2019-06-06T13:06:19Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name level1 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fc76d27-2348-44bd-bee9-fc6ce014e202", "record_id": "flaws_cloudtrail:0000448:5fc76d27-2348-44bd-bee9-fc6ce014e202", "row_index": 448, "timestamp": "2019-06-06T13:06:19Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fc76d27-2348-44bd-bee9-fc6ce014e202", "eventTime": "2019-06-06T13:06:19Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name level1 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7306e4a-65a9-41e0-9abf-00cf64d7fb70", "record_id": "flaws_cloudtrail:0000449:b7306e4a-65a9-41e0-9abf-00cf64d7fb70", "row_index": 449, "timestamp": "2019-06-06T13:06:22Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7306e4a-65a9-41e0-9abf-00cf64d7fb70", "eventTime": "2019-06-06T13:06:22Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7306e4a-65a9-41e0-9abf-00cf64d7fb70", "record_id": "flaws_cloudtrail:0000450:b7306e4a-65a9-41e0-9abf-00cf64d7fb70", "row_index": 450, "timestamp": "2019-06-06T13:06:22Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7306e4a-65a9-41e0-9abf-00cf64d7fb70", "eventTime": "2019-06-06T13:06:22Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dafb203-09ae-45eb-8f32-866cbb79da0b", "record_id": "flaws_cloudtrail:0000451:8dafb203-09ae-45eb-8f32-866cbb79da0b", "row_index": 451, "timestamp": "2019-06-06T13:10:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "[aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dafb203-09ae-45eb-8f32-866cbb79da0b", "eventTime": "2019-06-06T13:10:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "[aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dafb203-09ae-45eb-8f32-866cbb79da0b", "record_id": "flaws_cloudtrail:0000452:8dafb203-09ae-45eb-8f32-866cbb79da0b", "row_index": 452, "timestamp": "2019-06-06T13:10:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "[aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dafb203-09ae-45eb-8f32-866cbb79da0b", "eventTime": "2019-06-06T13:10:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "[aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "586f3a7c-65ec-4da4-8a63-1338b5e674ad", "record_id": "flaws_cloudtrail:0000453:586f3a7c-65ec-4da4-8a63-1338b5e674ad", "row_index": 453, "timestamp": "2019-06-06T13:12:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "586f3a7c-65ec-4da4-8a63-1338b5e674ad", "eventTime": "2019-06-06T13:12:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "586f3a7c-65ec-4da4-8a63-1338b5e674ad", "record_id": "flaws_cloudtrail:0000454:586f3a7c-65ec-4da4-8a63-1338b5e674ad", "row_index": 454, "timestamp": "2019-06-06T13:12:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "586f3a7c-65ec-4da4-8a63-1338b5e674ad", "eventTime": "2019-06-06T13:12:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "294f4e4c-fa77-4290-a5ae-0cc48ba058c7", "record_id": "flaws_cloudtrail:0000455:294f4e4c-fa77-4290-a5ae-0cc48ba058c7", "row_index": 455, "timestamp": "2019-06-06T13:13:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "294f4e4c-fa77-4290-a5ae-0cc48ba058c7", "eventTime": "2019-06-06T13:13:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "294f4e4c-fa77-4290-a5ae-0cc48ba058c7", "record_id": "flaws_cloudtrail:0000456:294f4e4c-fa77-4290-a5ae-0cc48ba058c7", "row_index": 456, "timestamp": "2019-06-06T13:13:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "294f4e4c-fa77-4290-a5ae-0cc48ba058c7", "eventTime": "2019-06-06T13:13:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dae9237-f98a-4dbc-8774-7ff10127c6d0", "record_id": "flaws_cloudtrail:0000457:7dae9237-f98a-4dbc-8774-7ff10127c6d0", "row_index": 457, "timestamp": "2019-06-06T13:14:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dae9237-f98a-4dbc-8774-7ff10127c6d0", "eventTime": "2019-06-06T13:14:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dae9237-f98a-4dbc-8774-7ff10127c6d0", "record_id": "flaws_cloudtrail:0000458:7dae9237-f98a-4dbc-8774-7ff10127c6d0", "row_index": 458, "timestamp": "2019-06-06T13:14:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dae9237-f98a-4dbc-8774-7ff10127c6d0", "eventTime": "2019-06-06T13:14:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd869ecd-181a-49d3-b7e2-f06dac3d9910", "record_id": "flaws_cloudtrail:0000459:cd869ecd-181a-49d3-b7e2-f06dac3d9910", "row_index": 459, "timestamp": "2019-06-06T13:14:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd869ecd-181a-49d3-b7e2-f06dac3d9910", "eventTime": "2019-06-06T13:14:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFYnRxRjlWSlNGaWh0SXlmUnFRdnUzR3F1VU9UN3lBMFZNZGtLWmZWTmtUR09Jdi8wY0VNb05xRk5aWHBST0pPenNOME9aenJFSHZwNVVvY29JNDM2NzE5Umw4dGZBSWF2eE0wdzJyekVmZWt6QUhnY1VqdnJoS3hEMHF5YUZVRHpzd1FZVWUzYWd4K2o3b0tEd0gya3V1WVJwVm0rTlVSUVhlNW8yQmtDdVZiWW14cEVJbW5UWHdKeGd0Q3c0T2pha0NpTi9Obm1HYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd869ecd-181a-49d3-b7e2-f06dac3d9910", "record_id": "flaws_cloudtrail:0000460:cd869ecd-181a-49d3-b7e2-f06dac3d9910", "row_index": 460, "timestamp": "2019-06-06T13:14:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd869ecd-181a-49d3-b7e2-f06dac3d9910", "eventTime": "2019-06-06T13:14:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFYnRxRjlWSlNGaWh0SXlmUnFRdnUzR3F1VU9UN3lBMFZNZGtLWmZWTmtUR09Jdi8wY0VNb05xRk5aWHBST0pPenNOME9aenJFSHZwNVVvY29JNDM2NzE5Umw4dGZBSWF2eE0wdzJyekVmZWt6QUhnY1VqdnJoS3hEMHF5YUZVRHpzd1FZVWUzYWd4K2o3b0tEd0gya3V1WVJwVm0rTlVSUVhlNW8yQmtDdVZiWW14cEVJbW5UWHdKeGd0Q3c0T2pha0NpTi9Obm1HYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a98ef0d-8421-4f3a-9e55-df72a2abfd44", "record_id": "flaws_cloudtrail:0000461:8a98ef0d-8421-4f3a-9e55-df72a2abfd44", "row_index": 461, "timestamp": "2019-06-06T13:14:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a98ef0d-8421-4f3a-9e55-df72a2abfd44", "eventTime": "2019-06-06T13:14:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKVHZqSjRGdTdSS2ZZbXo2RzJUMEx0K0k0MndsdERJZXZvcHE4NHlzaWVBSHVkZnR3U3cxRWgrRThrUDZBdGJpYnlhRm5zcmJVTjhyZnFkYzRnVi9WeTI3TVJiV2habU50eGhPRzNtN0dYcWh2bjlkcCtiRFMvVUFwL0MyYVNDNHBxUm54YVovVlhuQVBDalB2SlhkR0E4Sy9JUXNBL3pSRWF3SlE4bVp4ZVBWZ09aZVJyL1NJeVBPSlZUYndjbW04SkxpdzFML3ZHcXZ6dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a98ef0d-8421-4f3a-9e55-df72a2abfd44", "record_id": "flaws_cloudtrail:0000462:8a98ef0d-8421-4f3a-9e55-df72a2abfd44", "row_index": 462, "timestamp": "2019-06-06T13:14:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a98ef0d-8421-4f3a-9e55-df72a2abfd44", "eventTime": "2019-06-06T13:14:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKVHZqSjRGdTdSS2ZZbXo2RzJUMEx0K0k0MndsdERJZXZvcHE4NHlzaWVBSHVkZnR3U3cxRWgrRThrUDZBdGJpYnlhRm5zcmJVTjhyZnFkYzRnVi9WeTI3TVJiV2habU50eGhPRzNtN0dYcWh2bjlkcCtiRFMvVUFwL0MyYVNDNHBxUm54YVovVlhuQVBDalB2SlhkR0E4Sy9JUXNBL3pSRWF3SlE4bVp4ZVBWZ09aZVJyL1NJeVBPSlZUYndjbW04SkxpdzFML3ZHcXZ6dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "321f40ee-8bdd-47d7-bc87-f90689f491c3", "record_id": "flaws_cloudtrail:0000463:321f40ee-8bdd-47d7-bc87-f90689f491c3", "row_index": 463, "timestamp": "2019-06-06T13:14:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "321f40ee-8bdd-47d7-bc87-f90689f491c3", "eventTime": "2019-06-06T13:14:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsb2pQV0JzNU9jYTdhN2Jabnl0aVRoNjBOa2N2YnlsT0lqQkN4dUlaSzFRdFpFaWdKTjVyaXFxZU5BSVljYWdJaWpiaDMxRlIzOUZEOXJQRG51WnlCaHJ0NWkxOEdvWXRGYVl0bkZsS01idkN6aWF0dlBkWDBGSlFmOENqK01tU2ZXRC9Na0tPVXY5Zm5JclV0alRHZXRXeXcvaUNzT1FiTktqeHpzYTlnNFNDNHdWU1dLMkhnM0Q3clo0dkc3RVUwZjZ6M2JSSHhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "321f40ee-8bdd-47d7-bc87-f90689f491c3", "record_id": "flaws_cloudtrail:0000464:321f40ee-8bdd-47d7-bc87-f90689f491c3", "row_index": 464, "timestamp": "2019-06-06T13:14:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "321f40ee-8bdd-47d7-bc87-f90689f491c3", "eventTime": "2019-06-06T13:14:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsb2pQV0JzNU9jYTdhN2Jabnl0aVRoNjBOa2N2YnlsT0lqQkN4dUlaSzFRdFpFaWdKTjVyaXFxZU5BSVljYWdJaWpiaDMxRlIzOUZEOXJQRG51WnlCaHJ0NWkxOEdvWXRGYVl0bkZsS01idkN6aWF0dlBkWDBGSlFmOENqK01tU2ZXRC9Na0tPVXY5Zm5JclV0alRHZXRXeXcvaUNzT1FiTktqeHpzYTlnNFNDNHdWU1dLMkhnM0Q3clo0dkc3RVUwZjZ6M2JSSHhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2b87dfb-e633-466b-971e-623a58709a69", "record_id": "flaws_cloudtrail:0000465:a2b87dfb-e633-466b-971e-623a58709a69", "row_index": 465, "timestamp": "2019-06-06T13:14:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2b87dfb-e633-466b-971e-623a58709a69", "eventTime": "2019-06-06T13:14:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaWkZKT3JkdWF1UStzMUJMN0tjUFpZMkJDMExETW5FUGhESlhVVXFYRTl6N1JXWUVaRUMyeGVpTFlUK1k0anJPQk1qdHA0WlN6d0YrUjdiZ21sYzBTRlB3N2VtWHpGWDlRNEVUeFhXWkFveE96R2JUaTQxVG0yU1V0U1g0Q2VLSzd0ekRuUTR3VEdnVUtYRlJBK2VFR1JGSHhlUDlVRTVhZEFtN2IyRnUrdmlGZHpyYjROWk14bm01bDluVEh2dTdhMWZ5eGdLRXNqaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2b87dfb-e633-466b-971e-623a58709a69", "record_id": "flaws_cloudtrail:0000466:a2b87dfb-e633-466b-971e-623a58709a69", "row_index": 466, "timestamp": "2019-06-06T13:14:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2b87dfb-e633-466b-971e-623a58709a69", "eventTime": "2019-06-06T13:14:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaWkZKT3JkdWF1UStzMUJMN0tjUFpZMkJDMExETW5FUGhESlhVVXFYRTl6N1JXWUVaRUMyeGVpTFlUK1k0anJPQk1qdHA0WlN6d0YrUjdiZ21sYzBTRlB3N2VtWHpGWDlRNEVUeFhXWkFveE96R2JUaTQxVG0yU1V0U1g0Q2VLSzd0ekRuUTR3VEdnVUtYRlJBK2VFR1JGSHhlUDlVRTVhZEFtN2IyRnUrdmlGZHpyYjROWk14bm01bDluVEh2dTdhMWZ5eGdLRXNqaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e759151-66f9-46d0-8d2d-37debbd1e077", "record_id": "flaws_cloudtrail:0000467:e759151-66f9-46d0-8d2d-37debbd1e077", "row_index": 467, "timestamp": "2019-06-06T13:14:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e759151-66f9-46d0-8d2d-37debbd1e077", "eventTime": "2019-06-06T13:14:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBT0NsMXMwK2p1K1k5cEpzNG5CLysyRXBXdHc1dDlmQ3JwdGhSZ1MvRzBtT21RNmRnaXJPd3BDdlZyTmQreFhHcCt6Q2haTU93dG1ab3czbGdaOWRYSWVGdllBT1ovVlBNVE1YK1cxc0dkekRDbFpjOWt2WTNRUEZBdWpOSUFDOWFSWDduN2RqeU5rZlg4UVRrNUxvNHdYWm9DVFlZclhiQlZKcXlvQlZWazh6Skh4TWlWbmxhaStaUWZwMVVWcE84VWUvM0IyUzJ3SzVCUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e759151-66f9-46d0-8d2d-37debbd1e077", "record_id": "flaws_cloudtrail:0000468:e759151-66f9-46d0-8d2d-37debbd1e077", "row_index": 468, "timestamp": "2019-06-06T13:14:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e759151-66f9-46d0-8d2d-37debbd1e077", "eventTime": "2019-06-06T13:14:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBT0NsMXMwK2p1K1k5cEpzNG5CLysyRXBXdHc1dDlmQ3JwdGhSZ1MvRzBtT21RNmRnaXJPd3BDdlZyTmQreFhHcCt6Q2haTU93dG1ab3czbGdaOWRYSWVGdllBT1ovVlBNVE1YK1cxc0dkekRDbFpjOWt2WTNRUEZBdWpOSUFDOWFSWDduN2RqeU5rZlg4UVRrNUxvNHdYWm9DVFlZclhiQlZKcXlvQlZWazh6Skh4TWlWbmxhaStaUWZwMVVWcE84VWUvM0IyUzJ3SzVCUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35297-d1fe-43cd-b45c-1c9299a00dab", "record_id": "flaws_cloudtrail:0000469:35297-d1fe-43cd-b45c-1c9299a00dab", "row_index": 469, "timestamp": "2019-06-06T13:14:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35297-d1fe-43cd-b45c-1c9299a00dab", "eventTime": "2019-06-06T13:14:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwVzhxWHNGWllDQjI4blJKZEtTME5qQ2FRU09zYmhYbmIyTm5RaG91a1FKaEtGa3RTTmFMUmo5S1ZFdVdRam1DQ3U2cUFDcGtvY055NGpveW9FbGxmUkhObTViSlg4VWpyT3N2WEMyRWRzNm9kMGpRZ0hOMUFDbkJBRzV6a3NLckJGMG5ZejYraUZyeVZYTEp5T1JQMzhIYzFWN042S1BYWFE1U3pZVUY3Z2M4aDdocUY4L0Z2bFdWdTkrZG1uS2FKZVlQeHVaUXpRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35297-d1fe-43cd-b45c-1c9299a00dab", "record_id": "flaws_cloudtrail:0000470:35297-d1fe-43cd-b45c-1c9299a00dab", "row_index": 470, "timestamp": "2019-06-06T13:14:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35297-d1fe-43cd-b45c-1c9299a00dab", "eventTime": "2019-06-06T13:14:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwVzhxWHNGWllDQjI4blJKZEtTME5qQ2FRU09zYmhYbmIyTm5RaG91a1FKaEtGa3RTTmFMUmo5S1ZFdVdRam1DQ3U2cUFDcGtvY055NGpveW9FbGxmUkhObTViSlg4VWpyT3N2WEMyRWRzNm9kMGpRZ0hOMUFDbkJBRzV6a3NLckJGMG5ZejYraUZyeVZYTEp5T1JQMzhIYzFWN042S1BYWFE1U3pZVUY3Z2M4aDdocUY4L0Z2bFdWdTkrZG1uS2FKZVlQeHVaUXpRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d42b784-7f7e-4d58-b8c6-a03341abbfe", "record_id": "flaws_cloudtrail:0000471:2d42b784-7f7e-4d58-b8c6-a03341abbfe", "row_index": 471, "timestamp": "2019-06-06T13:14:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d42b784-7f7e-4d58-b8c6-a03341abbfe", "eventTime": "2019-06-06T13:14:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqd3Y5S1R6SjlJVGM5OTVyazlIN25xeDNvWG9YcTV3NXo1N1VtajJCcFp0bDZiTEhoUWpwWE10dHBHTE9IZVVtQ2NWcHdUQ0V5bzlDQ0RUSE1pNlRoOWNJNVBLTHJXa0hGbE5EL2hiaXdHYkZLVDVzcUxDWnN3akhnVDdIWEJvZFgzWU4wU2h2MkNHeHNnZUlDYllWVXYvT2RDaFg4Z2tST1I4d0ZmZTZNYVNIVFFIY3MwVTVHRnNMSWN5SFNqVTF5WXR6RmZsaUlIbU91dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d42b784-7f7e-4d58-b8c6-a03341abbfe", "record_id": "flaws_cloudtrail:0000472:2d42b784-7f7e-4d58-b8c6-a03341abbfe", "row_index": 472, "timestamp": "2019-06-06T13:14:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d42b784-7f7e-4d58-b8c6-a03341abbfe", "eventTime": "2019-06-06T13:14:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqd3Y5S1R6SjlJVGM5OTVyazlIN25xeDNvWG9YcTV3NXo1N1VtajJCcFp0bDZiTEhoUWpwWE10dHBHTE9IZVVtQ2NWcHdUQ0V5bzlDQ0RUSE1pNlRoOWNJNVBLTHJXa0hGbE5EL2hiaXdHYkZLVDVzcUxDWnN3akhnVDdIWEJvZFgzWU4wU2h2MkNHeHNnZUlDYllWVXYvT2RDaFg4Z2tST1I4d0ZmZTZNYVNIVFFIY3MwVTVHRnNMSWN5SFNqVTF5WXR6RmZsaUlIbU91dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "698bb1b0-2af1-4fa9-a5ab-4e02266cc1c7", "record_id": "flaws_cloudtrail:0000473:698bb1b0-2af1-4fa9-a5ab-4e02266cc1c7", "row_index": 473, "timestamp": "2019-06-06T13:14:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "698bb1b0-2af1-4fa9-a5ab-4e02266cc1c7", "eventTime": "2019-06-06T13:14:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0ckJKQ2p5TUhaY2ZmODNFeDA3K3hUcVRUbGtiTDFacXhxV0VpSUxORW5zSGZXM2NiWUVJVUVEN2xSQ0hlTE5FNlRuWmRYMWZsdWVudEhtV0xBN1crNTJkei8rRjZRNTBRZ1ZLTEcyeVY1TGFaUnJWcXhmRG1JVXlQUkw4VlcyenJ2bVY4ZDM5ZERtUDdrUmxaUE1oQWtCWTQrSURTVXJwM1VKS2pBSkZWYkdDWkdEdkJtKzE3aVVjUGk3QW94dHIrODA4anhFTXVlVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "698bb1b0-2af1-4fa9-a5ab-4e02266cc1c7", "record_id": "flaws_cloudtrail:0000474:698bb1b0-2af1-4fa9-a5ab-4e02266cc1c7", "row_index": 474, "timestamp": "2019-06-06T13:14:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "698bb1b0-2af1-4fa9-a5ab-4e02266cc1c7", "eventTime": "2019-06-06T13:14:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0ckJKQ2p5TUhaY2ZmODNFeDA3K3hUcVRUbGtiTDFacXhxV0VpSUxORW5zSGZXM2NiWUVJVUVEN2xSQ0hlTE5FNlRuWmRYMWZsdWVudEhtV0xBN1crNTJkei8rRjZRNTBRZ1ZLTEcyeVY1TGFaUnJWcXhmRG1JVXlQUkw4VlcyenJ2bVY4ZDM5ZERtUDdrUmxaUE1oQWtCWTQrSURTVXJwM1VKS2pBSkZWYkdDWkdEdkJtKzE3aVVjUGk3QW94dHIrODA4anhFTXVlVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e37a9708-e059-4c27-a16b-d0ae857e3770", "record_id": "flaws_cloudtrail:0000475:e37a9708-e059-4c27-a16b-d0ae857e3770", "row_index": 475, "timestamp": "2019-06-06T13:14:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e37a9708-e059-4c27-a16b-d0ae857e3770", "eventTime": "2019-06-06T13:14:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzWjJrQTdGeGtER1B2dVNPYnBhL2x1WmY1OE1JeVd1bEh5bGU0T1ZNSUl6Zmt0UzhzdzVLTlNGQ1BRY0lIUTV3RlFYMGlTWXZ4bXJKVE82U1dPeHVTcFJqS2FpeWp3OGlQWG9wSDRsN2ozeGNHK0ZQRmZoSm15dnBUZmZtM0VjTDBIR256QzQ2K3JyN2V4Vittai9Yc3FwVVI3eFNOS0FiVnBoWnBnUUdrakc5Wkc1Z1pqQndKSzBCSDVwSE93RDd2QnJvenp0cnM0L3ZEUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e37a9708-e059-4c27-a16b-d0ae857e3770", "record_id": "flaws_cloudtrail:0000476:e37a9708-e059-4c27-a16b-d0ae857e3770", "row_index": 476, "timestamp": "2019-06-06T13:14:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e37a9708-e059-4c27-a16b-d0ae857e3770", "eventTime": "2019-06-06T13:14:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzWjJrQTdGeGtER1B2dVNPYnBhL2x1WmY1OE1JeVd1bEh5bGU0T1ZNSUl6Zmt0UzhzdzVLTlNGQ1BRY0lIUTV3RlFYMGlTWXZ4bXJKVE82U1dPeHVTcFJqS2FpeWp3OGlQWG9wSDRsN2ozeGNHK0ZQRmZoSm15dnBUZmZtM0VjTDBIR256QzQ2K3JyN2V4Vittai9Yc3FwVVI3eFNOS0FiVnBoWnBnUUdrakc5Wkc1Z1pqQndKSzBCSDVwSE93RDd2QnJvenp0cnM0L3ZEUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97d04f11-f185-4866-8f78-ded1cc1a2229", "record_id": "flaws_cloudtrail:0000477:97d04f11-f185-4866-8f78-ded1cc1a2229", "row_index": 477, "timestamp": "2019-06-06T13:14:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97d04f11-f185-4866-8f78-ded1cc1a2229", "eventTime": "2019-06-06T13:14:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwWFZLRXk5SU1XRWtYaWhmcHBaTlo1bHo5STFSd0RGcjBzMldYTTNlVTk0S0FlTkRnWm5TWUhKM2c2Vk9Sd2c4a1lia2s2Vk8xTi9ESkl0TXNTQVBOeGR0d2VPNWhBaTFkZW9xYUtBdllMTCtjbFlobzJVdEFWM3dvOWhLTHN5T1l4RXJjelREbVdtTTU1TVJkQ01tMjNpSmhrVWlPSGcvaVJZbEpSQmFTS09RSVNaMmdZUEFFL2xLczFpd3c5ZXVFZkE1RFpGenUzU1BWdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97d04f11-f185-4866-8f78-ded1cc1a2229", "record_id": "flaws_cloudtrail:0000478:97d04f11-f185-4866-8f78-ded1cc1a2229", "row_index": 478, "timestamp": "2019-06-06T13:14:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97d04f11-f185-4866-8f78-ded1cc1a2229", "eventTime": "2019-06-06T13:14:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwWFZLRXk5SU1XRWtYaWhmcHBaTlo1bHo5STFSd0RGcjBzMldYTTNlVTk0S0FlTkRnWm5TWUhKM2c2Vk9Sd2c4a1lia2s2Vk8xTi9ESkl0TXNTQVBOeGR0d2VPNWhBaTFkZW9xYUtBdllMTCtjbFlobzJVdEFWM3dvOWhLTHN5T1l4RXJjelREbVdtTTU1TVJkQ01tMjNpSmhrVWlPSGcvaVJZbEpSQmFTS09RSVNaMmdZUEFFL2xLczFpd3c5ZXVFZkE1RFpGenUzU1BWdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b35ac83d-2a88-4afe-bb9c-d38ee409246c", "record_id": "flaws_cloudtrail:0000479:b35ac83d-2a88-4afe-bb9c-d38ee409246c", "row_index": 479, "timestamp": "2019-06-06T13:14:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b35ac83d-2a88-4afe-bb9c-d38ee409246c", "eventTime": "2019-06-06T13:14:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNcWNvNGM2amR1SXRjeldzVGVCRG1uZnV4VzZIa3J2dHE2bXJXVVFhREx5RWM2bXo1TzhlM28xQlFpZWZTd0hSL3ZoSjZ4RWcvam8zY25WUUZpVEJnaktITXlic2huZTZhNGQ3cEtyenJtWU5FMXFzMHZKcXB5Tjk0VEt0N3BWbEo5OUVVMVdRck82NFZKUkFJMk03ZWI0ODBSQ0hPMnIxRTlyR201Wm1GaUtRb21QUDRkSVFqdy9zUkk1T1VNMk5OMk5teUlZSFhtRlQ1UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b35ac83d-2a88-4afe-bb9c-d38ee409246c", "record_id": "flaws_cloudtrail:0000480:b35ac83d-2a88-4afe-bb9c-d38ee409246c", "row_index": 480, "timestamp": "2019-06-06T13:14:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b35ac83d-2a88-4afe-bb9c-d38ee409246c", "eventTime": "2019-06-06T13:14:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNcWNvNGM2amR1SXRjeldzVGVCRG1uZnV4VzZIa3J2dHE2bXJXVVFhREx5RWM2bXo1TzhlM28xQlFpZWZTd0hSL3ZoSjZ4RWcvam8zY25WUUZpVEJnaktITXlic2huZTZhNGQ3cEtyenJtWU5FMXFzMHZKcXB5Tjk0VEt0N3BWbEo5OUVVMVdRck82NFZKUkFJMk03ZWI0ODBSQ0hPMnIxRTlyR201Wm1GaUtRb21QUDRkSVFqdy9zUkk1T1VNMk5OMk5teUlZSFhtRlQ1UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54122ccb-c556-4527-879d-2088473fe5e8", "record_id": "flaws_cloudtrail:0000481:54122ccb-c556-4527-879d-2088473fe5e8", "row_index": 481, "timestamp": "2019-06-06T13:14:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54122ccb-c556-4527-879d-2088473fe5e8", "eventTime": "2019-06-06T13:14:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJONm10VW9FQ2lBNC9iZDZCNjU4ZkNMOXZIaFdUbjBYRjN2YWt5VjJCQVBWemRxKzZ0SWx2ZExEdnMySitydERoM2N1bGZrYzJVNDdpdktpYnZvYWlmN2ttaVh6VERtY3hkWkpOdXJEalZqREdxY1Mwb1ZWbjdBUzI2VnROWVR0YzkyZzZLRGxZRFVlOHR6OHM2OC9kVzAvbmFPSFVLQmlkYjc1VXgvTE14VnlKbVU0ZkRqOE5BaUFVU25qVTZ2ZTI2NmNqZGVTNTQ3eGZMUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54122ccb-c556-4527-879d-2088473fe5e8", "record_id": "flaws_cloudtrail:0000482:54122ccb-c556-4527-879d-2088473fe5e8", "row_index": 482, "timestamp": "2019-06-06T13:14:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54122ccb-c556-4527-879d-2088473fe5e8", "eventTime": "2019-06-06T13:14:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJONm10VW9FQ2lBNC9iZDZCNjU4ZkNMOXZIaFdUbjBYRjN2YWt5VjJCQVBWemRxKzZ0SWx2ZExEdnMySitydERoM2N1bGZrYzJVNDdpdktpYnZvYWlmN2ttaVh6VERtY3hkWkpOdXJEalZqREdxY1Mwb1ZWbjdBUzI2VnROWVR0YzkyZzZLRGxZRFVlOHR6OHM2OC9kVzAvbmFPSFVLQmlkYjc1VXgvTE14VnlKbVU0ZkRqOE5BaUFVU25qVTZ2ZTI2NmNqZGVTNTQ3eGZMUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "530361-9f78-4c4c-94bc-db981b755562", "record_id": "flaws_cloudtrail:0000483:530361-9f78-4c4c-94bc-db981b755562", "row_index": 483, "timestamp": "2019-06-06T13:14:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "530361-9f78-4c4c-94bc-db981b755562", "eventTime": "2019-06-06T13:14:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlMDdYU0l2M2xEQW5UQ0crV0hQQVJIcmVtOXhYUE9KOW80cFJwNGhIK0poM01mRER2b3lBVzdmNUpRNlVnditST0lWWERhL2dVRWRta3BqMXgzVXpWbWpnbG1FUTRuTmRteXM1Nm1wVmsreS9sMDZWb0N2MjI3K1R3K3lPc0dIQnNIcWI5OGM4anh1R3czZVdiMkM5QWIybDIrOFdHaEExZi9FSXNzMk4zbE11TWJXMkJzY1JuL0Y2S0hWMWlFbUdoaEdHaUwzdmN1UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "530361-9f78-4c4c-94bc-db981b755562", "record_id": "flaws_cloudtrail:0000484:530361-9f78-4c4c-94bc-db981b755562", "row_index": 484, "timestamp": "2019-06-06T13:14:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "530361-9f78-4c4c-94bc-db981b755562", "eventTime": "2019-06-06T13:14:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlMDdYU0l2M2xEQW5UQ0crV0hQQVJIcmVtOXhYUE9KOW80cFJwNGhIK0poM01mRER2b3lBVzdmNUpRNlVnditST0lWWERhL2dVRWRta3BqMXgzVXpWbWpnbG1FUTRuTmRteXM1Nm1wVmsreS9sMDZWb0N2MjI3K1R3K3lPc0dIQnNIcWI5OGM4anh1R3czZVdiMkM5QWIybDIrOFdHaEExZi9FSXNzMk4zbE11TWJXMkJzY1JuL0Y2S0hWMWlFbUdoaEdHaUwzdmN1UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebd8ffb4-7faa-4d11-be65-adf8834f70d2", "record_id": "flaws_cloudtrail:0000485:ebd8ffb4-7faa-4d11-be65-adf8834f70d2", "row_index": 485, "timestamp": "2019-06-06T13:14:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebd8ffb4-7faa-4d11-be65-adf8834f70d2", "eventTime": "2019-06-06T13:14:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBM3BHbFo1Si9NbUhGY1V3dStiNCtXMEZIWElzazA1MHRVUkxZdDBZS2laVmF6OVl4RmhBY3NvbTJmWVRmeHBnbDM1NkJCNXNnWTNIc041TVc1NFZWWTd0Sm5Ya1FBMTUyOW9sOTFGdkNHRkN0S2tOTUNPaFZ4VG95OCs4N050SENNVTZSZUE2V3kvaWRlTWtrWEpRYmZqZEFkWkNsZk1QTXpDZGlJRXVrcWRTaHdJT0w5M2QyRktOdlJ6U3R3ST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b72e2f88-e01d-4438-9b07-e07345cd", "record_id": "flaws_cloudtrail:0000486:b72e2f88-e01d-4438-9b07-e07345cd", "row_index": 486, "timestamp": "2019-06-06T13:14:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b72e2f88-e01d-4438-9b07-e07345cd", "eventTime": "2019-06-06T13:14:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxS2JaY0MzczdTSG1xYjFCckFKMnZ0ZGJHM0RSV2VQNU16di9aaHZ4d1ZXK1BRakNHZ25KVDB6UkxFejB5N1NQb05VaUR0MldXaWg5MmJPWHY0cWV6VVZaMzdmb3Y1SE1QNGJEWXd1NUFJWEhOYVhGU1pPNHE4Zk9mcEdjOXgvYU92RzNlNXhzR1pwdGFvOEpMSkdzb3ArZ0kyWEF2UEg3NHZXNmdEZDZueDg1VkEyWndsSmJpK2RGOFFKaFAweXZWQW9Mbmw4V0cxbEhQVmoweWpaRUd0dGxSWk9yaVZFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebd8ffb4-7faa-4d11-be65-adf8834f70d2", "record_id": "flaws_cloudtrail:0000487:ebd8ffb4-7faa-4d11-be65-adf8834f70d2", "row_index": 487, "timestamp": "2019-06-06T13:14:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebd8ffb4-7faa-4d11-be65-adf8834f70d2", "eventTime": "2019-06-06T13:14:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBM3BHbFo1Si9NbUhGY1V3dStiNCtXMEZIWElzazA1MHRVUkxZdDBZS2laVmF6OVl4RmhBY3NvbTJmWVRmeHBnbDM1NkJCNXNnWTNIc041TVc1NFZWWTd0Sm5Ya1FBMTUyOW9sOTFGdkNHRkN0S2tOTUNPaFZ4VG95OCs4N050SENNVTZSZUE2V3kvaWRlTWtrWEpRYmZqZEFkWkNsZk1QTXpDZGlJRXVrcWRTaHdJT0w5M2QyRktOdlJ6U3R3ST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b72e2f88-e01d-4438-9b07-e07345cd", "record_id": "flaws_cloudtrail:0000488:b72e2f88-e01d-4438-9b07-e07345cd", "row_index": 488, "timestamp": "2019-06-06T13:14:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b72e2f88-e01d-4438-9b07-e07345cd", "eventTime": "2019-06-06T13:14:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxS2JaY0MzczdTSG1xYjFCckFKMnZ0ZGJHM0RSV2VQNU16di9aaHZ4d1ZXK1BRakNHZ25KVDB6UkxFejB5N1NQb05VaUR0MldXaWg5MmJPWHY0cWV6VVZaMzdmb3Y1SE1QNGJEWXd1NUFJWEhOYVhGU1pPNHE4Zk9mcEdjOXgvYU92RzNlNXhzR1pwdGFvOEpMSkdzb3ArZ0kyWEF2UEg3NHZXNmdEZDZueDg1VkEyWndsSmJpK2RGOFFKaFAweXZWQW9Mbmw4V0cxbEhQVmoweWpaRUd0dGxSWk9yaVZFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6de52f1b-9358-43d4-baca-8e19c2254856", "record_id": "flaws_cloudtrail:0000489:6de52f1b-9358-43d4-baca-8e19c2254856", "row_index": 489, "timestamp": "2019-06-06T13:14:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6de52f1b-9358-43d4-baca-8e19c2254856", "eventTime": "2019-06-06T13:14:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnWFBmRjZ6Ynk2c2wwK28wOWlseitmV0xXT0w1K0l0Q0ROc21GbEVIWFpwaTQ5THNNMFlUMGlKZjVsbk8za2Uydkd5SGNTSGUxSlkxb0swMmlwZElOWlpkdnJWSklaUDlEWVBaYXR2ZUI0VmZkcEZpUStaRFpXbFQ4dG41TFQ3SHlVb25CNkh5clM4Ti9LSnRhNWlYOWwwQzhBcmVxY1JxOFl3VWZpYXM4cTE1UEtYazhGS2xDSWlOSGFJL2YwNytGZGVmeXphYlk4MnpYWGJJalJjK1Rld25xN2E5SDlZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6de52f1b-9358-43d4-baca-8e19c2254856", "record_id": "flaws_cloudtrail:0000490:6de52f1b-9358-43d4-baca-8e19c2254856", "row_index": 490, "timestamp": "2019-06-06T13:14:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6de52f1b-9358-43d4-baca-8e19c2254856", "eventTime": "2019-06-06T13:14:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnWFBmRjZ6Ynk2c2wwK28wOWlseitmV0xXT0w1K0l0Q0ROc21GbEVIWFpwaTQ5THNNMFlUMGlKZjVsbk8za2Uydkd5SGNTSGUxSlkxb0swMmlwZElOWlpkdnJWSklaUDlEWVBaYXR2ZUI0VmZkcEZpUStaRFpXbFQ4dG41TFQ3SHlVb25CNkh5clM4Ti9LSnRhNWlYOWwwQzhBcmVxY1JxOFl3VWZpYXM4cTE1UEtYazhGS2xDSWlOSGFJL2YwNytGZGVmeXphYlk4MnpYWGJJalJjK1Rld25xN2E5SDlZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e897a75c-5200-4b47-a38d-a2f94bd55dca", "record_id": "flaws_cloudtrail:0000491:e897a75c-5200-4b47-a38d-a2f94bd55dca", "row_index": 491, "timestamp": "2019-06-06T13:14:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e897a75c-5200-4b47-a38d-a2f94bd55dca", "eventTime": "2019-06-06T13:14:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4ZUdFMzh4Tjc5aGUvSFlnYUhTUlpST3JoMGlwNFhkV0ZNY25nbmN1dmlxNklBZGllMnNZUm1oNFkrdnY2V0d5UENHUWpIeGx3Z3NxYjdFcEFJcVlmakFkQ2NPdDlGZlNOMW0xanBYMFJuaERMMUtlb0J3MVpvVUVYNVF5eUVUQ3M4RnVFUWs4MTE2RXNVRVZxeXd6dTE5TEFiaDhIOVEzVjFRZG10OU1Md3BOb1hhc2hYSmgrUGZJV3QwTU13dz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e897a75c-5200-4b47-a38d-a2f94bd55dca", "record_id": "flaws_cloudtrail:0000492:e897a75c-5200-4b47-a38d-a2f94bd55dca", "row_index": 492, "timestamp": "2019-06-06T13:14:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e897a75c-5200-4b47-a38d-a2f94bd55dca", "eventTime": "2019-06-06T13:14:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4ZUdFMzh4Tjc5aGUvSFlnYUhTUlpST3JoMGlwNFhkV0ZNY25nbmN1dmlxNklBZGllMnNZUm1oNFkrdnY2V0d5UENHUWpIeGx3Z3NxYjdFcEFJcVlmakFkQ2NPdDlGZlNOMW0xanBYMFJuaERMMUtlb0J3MVpvVUVYNVF5eUVUQ3M4RnVFUWs4MTE2RXNVRVZxeXd6dTE5TEFiaDhIOVEzVjFRZG10OU1Md3BOb1hhc2hYSmgrUGZJV3QwTU13dz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd190b62-57d1-45e1-891a-c8731ee13880", "record_id": "flaws_cloudtrail:0000493:fd190b62-57d1-45e1-891a-c8731ee13880", "row_index": 493, "timestamp": "2019-06-06T13:14:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd190b62-57d1-45e1-891a-c8731ee13880", "eventTime": "2019-06-06T13:14:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqVkM5K0xoU2tYMFMxbG0wSCtwNTQxZHVzTkd2ZnRCa1d2VU4zdnRYWUp5SllYemVMQTk0d3hXR3ZYaUlaRDZMYno5K2tHOUoyS2ZtQTdMb2J6dkg3WXp6eDZidVZ5U1d5VHpLY1RRaTVMcm9oNWkxZU5PK1JQR1ZoSUNlcE9XbGdXNkkvc2M2NG1RbmRsaEJ6cWdUN0oxSVhUMEU1SXNNQ09zV0Zkb056TlJGTVBFVkhMdHdHU3F4bHBSV3p2NDR1MXdNcWdBUVdoK1J0dlc2TXpKbHQ1NzdjanVTT2kwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd190b62-57d1-45e1-891a-c8731ee13880", "record_id": "flaws_cloudtrail:0000494:fd190b62-57d1-45e1-891a-c8731ee13880", "row_index": 494, "timestamp": "2019-06-06T13:14:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd190b62-57d1-45e1-891a-c8731ee13880", "eventTime": "2019-06-06T13:14:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqVkM5K0xoU2tYMFMxbG0wSCtwNTQxZHVzTkd2ZnRCa1d2VU4zdnRYWUp5SllYemVMQTk0d3hXR3ZYaUlaRDZMYno5K2tHOUoyS2ZtQTdMb2J6dkg3WXp6eDZidVZ5U1d5VHpLY1RRaTVMcm9oNWkxZU5PK1JQR1ZoSUNlcE9XbGdXNkkvc2M2NG1RbmRsaEJ6cWdUN0oxSVhUMEU1SXNNQ09zV0Zkb056TlJGTVBFVkhMdHdHU3F4bHBSV3p2NDR1MXdNcWdBUVdoK1J0dlc2TXpKbHQ1NzdjanVTT2kwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8a9551d-21b1-4271-8bda-1f919e29bd18", "record_id": "flaws_cloudtrail:0000495:c8a9551d-21b1-4271-8bda-1f919e29bd18", "row_index": 495, "timestamp": "2019-06-06T13:14:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8a9551d-21b1-4271-8bda-1f919e29bd18", "eventTime": "2019-06-06T13:14:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3MU9WVnhqSHFWcVo5dWYzYWlLQzNjTnF1czFBcWhZVkwxUWtmTDlLVGVBV3pFWU90VGQ5QnFQQ1k4RFQyMFVRQUpKVkVoQUR3UGtZeEpoYzhJQkFaS0xJbExjYU5kZjNSQk9DTHRPM21FdzEzejJFRmVlaUQ1OGJTQ21tUFl1aFEvMGs5enFPQzF4REVueFlVbml4cHJpYjlRRlVFbGNhYlBkOHk3MWdsY1IvUHJaTXBNcE1ISE5QSkg4cGVMaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8a9551d-21b1-4271-8bda-1f919e29bd18", "record_id": "flaws_cloudtrail:0000496:c8a9551d-21b1-4271-8bda-1f919e29bd18", "row_index": 496, "timestamp": "2019-06-06T13:14:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8a9551d-21b1-4271-8bda-1f919e29bd18", "eventTime": "2019-06-06T13:14:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3MU9WVnhqSHFWcVo5dWYzYWlLQzNjTnF1czFBcWhZVkwxUWtmTDlLVGVBV3pFWU90VGQ5QnFQQ1k4RFQyMFVRQUpKVkVoQUR3UGtZeEpoYzhJQkFaS0xJbExjYU5kZjNSQk9DTHRPM21FdzEzejJFRmVlaUQ1OGJTQ21tUFl1aFEvMGs5enFPQzF4REVueFlVbml4cHJpYjlRRlVFbGNhYlBkOHk3MWdsY1IvUHJaTXBNcE1ISE5QSkg4cGVMaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38d264fb-3eeb-4d8f-8987-b2bb9e22ab48", "record_id": "flaws_cloudtrail:0000497:38d264fb-3eeb-4d8f-8987-b2bb9e22ab48", "row_index": 497, "timestamp": "2019-06-06T13:14:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38d264fb-3eeb-4d8f-8987-b2bb9e22ab48", "eventTime": "2019-06-06T13:14:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1bUhZTzE2UDg2ZDMvWVgvbHNua2dKR3RPTkh0WUpmdE5lbFFFSEdyd25BVGpZT2ZCSU5hNkVQS0FOK2hWNkNWU1RpdzI5bk9aMFBaQXorblVySnlnM05wUkxMRHVVSUpZSi9EL3l6N3l1TUM1M3U2STc1NlpSUTB4bHpTSUJraGF3WWhOV21Sd2s0Y2xadExjNUV2c1BiSU9XVWNTak5XOVZzQ3gvckRKQjZvWk5RSEtxWnNKUXpuR0tTeDFEVUlQYTJUbkltSDJhdTBmdUd3eHluaFhkNVM0ekRpYWYwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38d264fb-3eeb-4d8f-8987-b2bb9e22ab48", "record_id": "flaws_cloudtrail:0000498:38d264fb-3eeb-4d8f-8987-b2bb9e22ab48", "row_index": 498, "timestamp": "2019-06-06T13:14:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38d264fb-3eeb-4d8f-8987-b2bb9e22ab48", "eventTime": "2019-06-06T13:14:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1bUhZTzE2UDg2ZDMvWVgvbHNua2dKR3RPTkh0WUpmdE5lbFFFSEdyd25BVGpZT2ZCSU5hNkVQS0FOK2hWNkNWU1RpdzI5bk9aMFBaQXorblVySnlnM05wUkxMRHVVSUpZSi9EL3l6N3l1TUM1M3U2STc1NlpSUTB4bHpTSUJraGF3WWhOV21Sd2s0Y2xadExjNUV2c1BiSU9XVWNTak5XOVZzQ3gvckRKQjZvWk5RSEtxWnNKUXpuR0tTeDFEVUlQYTJUbkltSDJhdTBmdUd3eHluaFhkNVM0ekRpYWYwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c3162cb-3183-4be4-8197-d9457df2f5db", "record_id": "flaws_cloudtrail:0000499:1c3162cb-3183-4be4-8197-d9457df2f5db", "row_index": 499, "timestamp": "2019-06-06T13:14:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c3162cb-3183-4be4-8197-d9457df2f5db", "eventTime": "2019-06-06T13:14:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUNXJqVnprelVXZm9Lb0k5TWNZVEIxRDAreDBxVm8rOVJuS09oZGJTdEtaNHF0VUp4QWloeFpZeXFmY0NzWVZ1ZHBUL0VBUThBbGVBNHNtUVdLL3RmSmxWRExDRkowKzlSTU9CTUcxeDg0aVYyNzJuMWExVXhuNUIxT3QycFh0OWd0WmdSVlVDWWhQUFE4d0UxZDZIdEQ2dWdOR2NLNzkxV1BCMjdNcXhZVXl0Yk14OE5hTjFqRlhQK2FsQWFXTjVIOFNZQ3ptbWkyM3FpOGdzS3JtQTZYVExOMU9UL3hBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea167368a-a401-4d45-87e0-9b7fd3e7b4ac", "record_id": "flaws_cloudtrail:0000500:ea167368a-a401-4d45-87e0-9b7fd3e7b4ac", "row_index": 500, "timestamp": "2019-06-06T13:14:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea167368a-a401-4d45-87e0-9b7fd3e7b4ac", "eventTime": "2019-06-06T13:14:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJva25udy9ZS25meStLUXBVdXJ5K1Vva29GL09LRGZHWGVONzk2Y1hJbWQzeWpxTW1qa1FxeHlSTU53cjl6ZlhWNzZsS25BOHpFRlJEcmpKUkxpYWxxSUxBMVp3MHpocmI5YjB4dWU0Y0NwMnM5SkRFOXVTdjNQeHNMN2NRRDJNdzFyVEovMnBVejRGNzFid21abTBmNm1VL05jenVxaDcvRU9RcG9qQ2tlVUtlVWpvS09ZaXJtRXlVdFFhZXU2RT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c3162cb-3183-4be4-8197-d9457df2f5db", "record_id": "flaws_cloudtrail:0000501:1c3162cb-3183-4be4-8197-d9457df2f5db", "row_index": 501, "timestamp": "2019-06-06T13:14:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c3162cb-3183-4be4-8197-d9457df2f5db", "eventTime": "2019-06-06T13:14:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUNXJqVnprelVXZm9Lb0k5TWNZVEIxRDAreDBxVm8rOVJuS09oZGJTdEtaNHF0VUp4QWloeFpZeXFmY0NzWVZ1ZHBUL0VBUThBbGVBNHNtUVdLL3RmSmxWRExDRkowKzlSTU9CTUcxeDg0aVYyNzJuMWExVXhuNUIxT3QycFh0OWd0WmdSVlVDWWhQUFE4d0UxZDZIdEQ2dWdOR2NLNzkxV1BCMjdNcXhZVXl0Yk14OE5hTjFqRlhQK2FsQWFXTjVIOFNZQ3ptbWkyM3FpOGdzS3JtQTZYVExOMU9UL3hBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea167368a-a401-4d45-87e0-9b7fd3e7b4ac", "record_id": "flaws_cloudtrail:0000502:ea167368a-a401-4d45-87e0-9b7fd3e7b4ac", "row_index": 502, "timestamp": "2019-06-06T13:14:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea167368a-a401-4d45-87e0-9b7fd3e7b4ac", "eventTime": "2019-06-06T13:14:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJva25udy9ZS25meStLUXBVdXJ5K1Vva29GL09LRGZHWGVONzk2Y1hJbWQzeWpxTW1qa1FxeHlSTU53cjl6ZlhWNzZsS25BOHpFRlJEcmpKUkxpYWxxSUxBMVp3MHpocmI5YjB4dWU0Y0NwMnM5SkRFOXVTdjNQeHNMN2NRRDJNdzFyVEovMnBVejRGNzFid21abTBmNm1VL05jenVxaDcvRU9RcG9qQ2tlVUtlVWpvS09ZaXJtRXlVdFFhZXU2RT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da50615c-659e-4402-832c-349832e10ba9", "record_id": "flaws_cloudtrail:0000503:da50615c-659e-4402-832c-349832e10ba9", "row_index": 503, "timestamp": "2019-06-06T13:14:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da50615c-659e-4402-832c-349832e10ba9", "eventTime": "2019-06-06T13:14:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKQlArejkrL0F4YWtKUU42TFU2LysxQXhtRFJkRnRlM1F3Y0l0TG4yblJWSFNNT24xbDBqcE90VEdvMWVJWmZIdFNXZTFHeUZRaGpMM1ZnWnFIUWxrZzRqYXhmb1owTWJoTlFJQ2ZZd1pURDduOEdwNytpQytXYmZzbTBLQitNck01aU52TGJFcmFVOWljSkR5bmljS2dYRnNCb1RSK1VOTFUxaGJmSHZHVmlCTmxRZllUNWFBUEw4ckR4QzAxdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da50615c-659e-4402-832c-349832e10ba9", "record_id": "flaws_cloudtrail:0000504:da50615c-659e-4402-832c-349832e10ba9", "row_index": 504, "timestamp": "2019-06-06T13:14:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "229.250.221.251", "user_agent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da50615c-659e-4402-832c-349832e10ba9", "eventTime": "2019-06-06T13:14:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "229.250.221.251", "userAgent": "aws-cli/1.11.56 Python/2.7.10 Darwin/17.5.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKQlArejkrL0F4YWtKUU42TFU2LysxQXhtRFJkRnRlM1F3Y0l0TG4yblJWSFNNT24xbDBqcE90VEdvMWVJWmZIdFNXZTFHeUZRaGpMM1ZnWnFIUWxrZzRqYXhmb1owTWJoTlFJQ2ZZd1pURDduOEdwNytpQytXYmZzbTBLQitNck01aU52TGJFcmFVOWljSkR5bmljS2dYRnNCb1RSK1VOTFUxaGJmSHZHVmlCTmxRZllUNWFBUEw4ckR4QzAxdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d8c69ca-bbe2-4abb-90be-62a5b6dc65ce", "record_id": "flaws_cloudtrail:0000505:4d8c69ca-bbe2-4abb-90be-62a5b6dc65ce", "row_index": 505, "timestamp": "2019-06-06T13:16:55Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d8c69ca-bbe2-4abb-90be-62a5b6dc65ce", "eventTime": "2019-06-06T13:16:55Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d8c69ca-bbe2-4abb-90be-62a5b6dc65ce", "record_id": "flaws_cloudtrail:0000506:4d8c69ca-bbe2-4abb-90be-62a5b6dc65ce", "row_index": 506, "timestamp": "2019-06-06T13:16:55Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d8c69ca-bbe2-4abb-90be-62a5b6dc65ce", "eventTime": "2019-06-06T13:16:55Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "293bd61a-8b88-45db-b0aa-21bd594cfa47", "record_id": "flaws_cloudtrail:0000507:293bd61a-8b88-45db-b0aa-21bd594cfa47", "row_index": 507, "timestamp": "2019-06-06T13:19:46Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "293bd61a-8b88-45db-b0aa-21bd594cfa47", "eventTime": "2019-06-06T13:19:46Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "293bd61a-8b88-45db-b0aa-21bd594cfa47", "record_id": "flaws_cloudtrail:0000508:293bd61a-8b88-45db-b0aa-21bd594cfa47", "row_index": 508, "timestamp": "2019-06-06T13:19:46Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "293bd61a-8b88-45db-b0aa-21bd594cfa47", "eventTime": "2019-06-06T13:19:46Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbaeadda-cb27-4f46-af5d-9f297398e855", "record_id": "flaws_cloudtrail:0000509:dbaeadda-cb27-4f46-af5d-9f297398e855", "row_index": 509, "timestamp": "2019-06-06T13:21:57Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbaeadda-cb27-4f46-af5d-9f297398e855", "eventTime": "2019-06-06T13:21:57Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbaeadda-cb27-4f46-af5d-9f297398e855", "record_id": "flaws_cloudtrail:0000510:dbaeadda-cb27-4f46-af5d-9f297398e855", "row_index": 510, "timestamp": "2019-06-06T13:21:57Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbaeadda-cb27-4f46-af5d-9f297398e855", "eventTime": "2019-06-06T13:21:57Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9162af4f-3f30-4c0e-b5fd-8d4fcb3e2352", "record_id": "flaws_cloudtrail:0000511:9162af4f-3f30-4c0e-b5fd-8d4fcb3e2352", "row_index": 511, "timestamp": "2019-06-06T13:22:36Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9162af4f-3f30-4c0e-b5fd-8d4fcb3e2352", "eventTime": "2019-06-06T13:22:36Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9162af4f-3f30-4c0e-b5fd-8d4fcb3e2352", "record_id": "flaws_cloudtrail:0000512:9162af4f-3f30-4c0e-b5fd-8d4fcb3e2352", "row_index": 512, "timestamp": "2019-06-06T13:22:36Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9162af4f-3f30-4c0e-b5fd-8d4fcb3e2352", "eventTime": "2019-06-06T13:22:36Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "541b17db-aed0-468c-8eb9-476f3610d2f1", "record_id": "flaws_cloudtrail:0000513:541b17db-aed0-468c-8eb9-476f3610d2f1", "row_index": 513, "timestamp": "2019-06-06T13:23:52Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "541b17db-aed0-468c-8eb9-476f3610d2f1", "eventTime": "2019-06-06T13:23:52Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Login Profile for User Level6 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "541b17db-aed0-468c-8eb9-476f3610d2f1", "record_id": "flaws_cloudtrail:0000514:541b17db-aed0-468c-8eb9-476f3610d2f1", "row_index": 514, "timestamp": "2019-06-06T13:23:52Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "541b17db-aed0-468c-8eb9-476f3610d2f1", "eventTime": "2019-06-06T13:23:52Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Login Profile for User Level6 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b770237f-9838-4ec5-8546-c69029cd6adb", "record_id": "flaws_cloudtrail:0000515:2b770237f-9838-4ec5-8546-c69029cd6adb", "row_index": 515, "timestamp": "2019-06-06T13:24:11Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b770237f-9838-4ec5-8546-c69029cd6adb", "eventTime": "2019-06-06T13:24:11Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Login Profile for User Level6 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b770237f-9838-4ec5-8546-c69029cd6adb", "record_id": "flaws_cloudtrail:0000516:2b770237f-9838-4ec5-8546-c69029cd6adb", "row_index": 516, "timestamp": "2019-06-06T13:24:11Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b770237f-9838-4ec5-8546-c69029cd6adb", "eventTime": "2019-06-06T13:24:11Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Login Profile for User Level6 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5d54b6e-9d0e-4f34-9857-b613325f8afe1", "record_id": "flaws_cloudtrail:0000517:b5d54b6e-9d0e-4f34-9857-b613325f8afe1", "row_index": 517, "timestamp": "2019-06-06T13:24:22Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5d54b6e-9d0e-4f34-9857-b613325f8afe1", "eventTime": "2019-06-06T13:24:22Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5d54b6e-9d0e-4f34-9857-b613325f8afe1", "record_id": "flaws_cloudtrail:0000518:b5d54b6e-9d0e-4f34-9857-b613325f8afe1", "row_index": 518, "timestamp": "2019-06-06T13:24:22Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5d54b6e-9d0e-4f34-9857-b613325f8afe1", "eventTime": "2019-06-06T13:24:22Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ac4f516-200d-4e8e-afe5-3b4ba2b572c9", "record_id": "flaws_cloudtrail:0000519:5ac4f516-200d-4e8e-afe5-3b4ba2b572c9", "row_index": 519, "timestamp": "2019-06-06T13:24:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ac4f516-200d-4e8e-afe5-3b4ba2b572c9", "eventTime": "2019-06-06T13:24:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7DXWQ2ONZZDKUEPP", "expiration": "Jun 6, 2019 7:55:32 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ac4f516-200d-4e8e-afe5-3b4ba2b572c9", "record_id": "flaws_cloudtrail:0000520:5ac4f516-200d-4e8e-afe5-3b4ba2b572c9", "row_index": 520, "timestamp": "2019-06-06T13:24:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ac4f516-200d-4e8e-afe5-3b4ba2b572c9", "eventTime": "2019-06-06T13:24:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7DXWQ2ONZZDKUEPP", "expiration": "Jun 6, 2019 7:55:32 PM", "sessionToken": "AgoJb3JpZ2luX2VjEAYaCXVzLXdlc3QtMiJGMEQCIEheEeyeZnGNPBS7BvXOPrR/tACTTUNkhPet+QiIgReoAiBe+2aCutQv/hcg6ppHKcCNf4E3iA/CaWZgemY9XdHf6SraAwgvEAAaDDk3NTQyNjI2MjAyOSIMpH++OX+TBQ0Uz3QoKrcDzFCJOdPgfoE74ssYUxGtCEyeSJamBWCPFDr5Peqv9kMgaCNPekjA8c/+MtO5Qdnvf1PYb/CoWiZmNlkI+rN6NOz13nAUI8dnTrdGal4YrZHwdIbqsiMEiLDg9d2GYnI+AtDSYzU+Ybhw22jxsu3pPKybwBhkNECUlfMi1HhZy1frldvCPJQm8mAOM5bRpYFn0Mir6NI63ofL7Nv9cBwtD4Hj3ViHgVNYNyXagAWqyhNFkoAPaVa7D5iGx5HhSD+0K9G0fxv+Eyh5Lr0HEMbsZQsZDOm+Cq1fcfw9EN6gKdnGUjCoiXy9p8OH5oqpwh24NTRST9zlsCefdk0wxMDZot619GNMh8f43P21R1RcbKIYte70XDBxATJLU+X70q/LIqac+ltn5uwGIxl5r5TUMACTywn0ufrrxaY6dWDYpWRM7W3BTlFeIJG8zlyQ4ENv0qk4s+Vgy5pqUWXmZpI1Z2HWa53Mqo20UbDmATAyLUIpvamsxjPDl6jB6lI4qlw7aBRpE+aW9sKNyjpl3bwMFpjGItIyaRs8q8ymBigKvbMPg2LIc4lkrFlbwy/H0EEm/QjjrsTJeTChqOTnBTq1AcTS5j8IBGbtrSB9eFPml79mKTKl8oMgxWvJVCMuq35OyXYMEMh1sG/7bubKwFZWp8RGm2j8jDgbtk957jPtee/ODjg0TXjC6axTpnKSA5L/QHYOqwB3bSEN/xUSLwkSU7o7JuvwskvSrLjmvw97AALCwGLkjkFpuMw8RrJoztrzGaY6KZxuuKGqyX+y6YtwSoW5bu8RM80PBxRntFkA6k44sF/6ZTOFkGXdsjr7y1yTHK2ForQ="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b95e05c-54b0-4d48-ac9a-2902ef7adbc8", "record_id": "flaws_cloudtrail:0000521:7b95e05c-54b0-4d48-ac9a-2902ef7adbc8", "row_index": 521, "timestamp": "2019-06-06T13:25:10Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b95e05c-54b0-4d48-ac9a-2902ef7adbc8", "eventTime": "2019-06-06T13:25:10Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name SecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "SecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b95e05c-54b0-4d48-ac9a-2902ef7adbc8", "record_id": "flaws_cloudtrail:0000522:7b95e05c-54b0-4d48-ac9a-2902ef7adbc8", "row_index": 522, "timestamp": "2019-06-06T13:25:10Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b95e05c-54b0-4d48-ac9a-2902ef7adbc8", "eventTime": "2019-06-06T13:25:10Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name SecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "SecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cc162a9-1c8d-4263-8886-266f86fc448e", "record_id": "flaws_cloudtrail:0000523:1cc162a9-1c8d-4263-8886-266f86fc448e", "row_index": 523, "timestamp": "2019-06-06T13:25:59Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cc162a9-1c8d-4263-8886-266f86fc448e", "eventTime": "2019-06-06T13:25:59Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cc162a9-1c8d-4263-8886-266f86fc448e", "record_id": "flaws_cloudtrail:0000524:1cc162a9-1c8d-4263-8886-266f86fc448e", "row_index": 524, "timestamp": "2019-06-06T13:25:59Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cc162a9-1c8d-4263-8886-266f86fc448e", "eventTime": "2019-06-06T13:25:59Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f7537fa-9a61-4567-bf5b-6f7cdd39d1e1", "record_id": "flaws_cloudtrail:0000525:9f7537fa-9a61-4567-bf5b-6f7cdd39d1e1", "row_index": 525, "timestamp": "2019-06-06T13:28:20Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f7537fa-9a61-4567-bf5b-6f7cdd39d1e1", "eventTime": "2019-06-06T13:28:20Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f7537fa-9a61-4567-bf5b-6f7cdd39d1e1", "record_id": "flaws_cloudtrail:0000526:9f7537fa-9a61-4567-bf5b-6f7cdd39d1e1", "row_index": 526, "timestamp": "2019-06-06T13:28:20Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f7537fa-9a61-4567-bf5b-6f7cdd39d1e1", "eventTime": "2019-06-06T13:28:20Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c898032d-03a4-422b-a583-65e7216e117e", "record_id": "flaws_cloudtrail:0000527:3c898032d-03a4-422b-a583-65e7216e117e", "row_index": 527, "timestamp": "2019-06-06T13:35:16Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c898032d-03a4-422b-a583-65e7216e117e", "eventTime": "2019-06-06T13:35:16Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c898032d-03a4-422b-a583-65e7216e117e", "record_id": "flaws_cloudtrail:0000528:3c898032d-03a4-422b-a583-65e7216e117e", "row_index": 528, "timestamp": "2019-06-06T13:35:16Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c898032d-03a4-422b-a583-65e7216e117e", "eventTime": "2019-06-06T13:35:16Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "600838ce3-820a-4cb6-b595-646baf4243b5", "record_id": "flaws_cloudtrail:0000529:600838ce3-820a-4cb6-b595-646baf4243b5", "row_index": 529, "timestamp": "2019-06-06T13:36:37Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "600838ce3-820a-4cb6-b595-646baf4243b5", "eventTime": "2019-06-06T13:36:37Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "600838ce3-820a-4cb6-b595-646baf4243b5", "record_id": "flaws_cloudtrail:0000530:600838ce3-820a-4cb6-b595-646baf4243b5", "row_index": 530, "timestamp": "2019-06-06T13:36:37Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "600838ce3-820a-4cb6-b595-646baf4243b5", "eventTime": "2019-06-06T13:36:37Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0818c3cd-2cf6-4ff1-aa42-db1e0fba0340", "record_id": "flaws_cloudtrail:0000531:0818c3cd-2cf6-4ff1-aa42-db1e0fba0340", "row_index": 531, "timestamp": "2019-06-06T13:37:42Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0818c3cd-2cf6-4ff1-aa42-db1e0fba0340", "eventTime": "2019-06-06T13:37:42Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0818c3cd-2cf6-4ff1-aa42-db1e0fba0340", "record_id": "flaws_cloudtrail:0000532:0818c3cd-2cf6-4ff1-aa42-db1e0fba0340", "row_index": 532, "timestamp": "2019-06-06T13:37:42Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0818c3cd-2cf6-4ff1-aa42-db1e0fba0340", "eventTime": "2019-06-06T13:37:42Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fdd3057-2ba6-4012-ba43-773ac310ea5f", "record_id": "flaws_cloudtrail:0000533:3fdd3057-2ba6-4012-ba43-773ac310ea5f", "row_index": 533, "timestamp": "2019-06-06T13:38:00Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fdd3057-2ba6-4012-ba43-773ac310ea5f", "eventTime": "2019-06-06T13:38:00Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fdd3057-2ba6-4012-ba43-773ac310ea5f", "record_id": "flaws_cloudtrail:0000534:3fdd3057-2ba6-4012-ba43-773ac310ea5f", "row_index": 534, "timestamp": "2019-06-06T13:38:00Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fdd3057-2ba6-4012-ba43-773ac310ea5f", "eventTime": "2019-06-06T13:38:00Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07f1c488-f64d-4046-aebb-130b7961b413", "record_id": "flaws_cloudtrail:0000535:07f1c488-f64d-4046-aebb-130b7961b413", "row_index": 535, "timestamp": "2019-06-06T13:41:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07f1c488-f64d-4046-aebb-130b7961b413", "eventTime": "2019-06-06T13:41:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07f1c488-f64d-4046-aebb-130b7961b413", "record_id": "flaws_cloudtrail:0000536:07f1c488-f64d-4046-aebb-130b7961b413", "row_index": 536, "timestamp": "2019-06-06T13:41:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07f1c488-f64d-4046-aebb-130b7961b413", "eventTime": "2019-06-06T13:41:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8260b417-8155-4a34-8a74-25bc679aa7ac", "record_id": "flaws_cloudtrail:0000537:8260b417-8155-4a34-8a74-25bc679aa7ac", "row_index": 537, "timestamp": "2019-06-06T13:43:25Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8260b417-8155-4a34-8a74-25bc679aa7ac", "eventTime": "2019-06-06T13:43:25Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8260b417-8155-4a34-8a74-25bc679aa7ac", "record_id": "flaws_cloudtrail:0000538:8260b417-8155-4a34-8a74-25bc679aa7ac", "row_index": 538, "timestamp": "2019-06-06T13:43:25Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8260b417-8155-4a34-8a74-25bc679aa7ac", "eventTime": "2019-06-06T13:43:25Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d8b74ab-bbb8-479f-bb16-409e557b25cb", "record_id": "flaws_cloudtrail:0000539:3d8b74ab-bbb8-479f-bb16-409e557b25cb", "row_index": 539, "timestamp": "2019-06-06T13:45:28Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d8b74ab-bbb8-479f-bb16-409e557b25cb", "eventTime": "2019-06-06T13:45:28Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d8b74ab-bbb8-479f-bb16-409e557b25cb", "record_id": "flaws_cloudtrail:0000540:3d8b74ab-bbb8-479f-bb16-409e557b25cb", "row_index": 540, "timestamp": "2019-06-06T13:45:28Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d8b74ab-bbb8-479f-bb16-409e557b25cb", "eventTime": "2019-06-06T13:45:28Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94e2bbf1-61e6-454b-8b00-6a4387d2ade6", "record_id": "flaws_cloudtrail:0000541:94e2bbf1-61e6-454b-8b00-6a4387d2ade6", "row_index": 541, "timestamp": "2019-06-06T13:47:40Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.250.7", "user_agent": "aws-cli/1.16.169 Python/3.5.3 Linux/4.9.0-9-amd64 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94e2bbf1-61e6-454b-8b00-6a4387d2ade6", "eventTime": "2019-06-06T13:47:40Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.250.7", "userAgent": "aws-cli/1.16.169 Python/3.5.3 Linux/4.9.0-9-amd64 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94e2bbf1-61e6-454b-8b00-6a4387d2ade6", "record_id": "flaws_cloudtrail:0000542:94e2bbf1-61e6-454b-8b00-6a4387d2ade6", "row_index": 542, "timestamp": "2019-06-06T13:47:40Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.250.7", "user_agent": "aws-cli/1.16.169 Python/3.5.3 Linux/4.9.0-9-amd64 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94e2bbf1-61e6-454b-8b00-6a4387d2ade6", "eventTime": "2019-06-06T13:47:40Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.250.7", "userAgent": "aws-cli/1.16.169 Python/3.5.3 Linux/4.9.0-9-amd64 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b5eed30-e9a4-4818-a08c-cf9a224a8a06", "record_id": "flaws_cloudtrail:0000543:9b5eed30-e9a4-4818-a08c-cf9a224a8a06", "row_index": 543, "timestamp": "2019-06-06T13:48:12Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b5eed30-e9a4-4818-a08c-cf9a224a8a06", "eventTime": "2019-06-06T13:48:12Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b5eed30-e9a4-4818-a08c-cf9a224a8a06", "record_id": "flaws_cloudtrail:0000544:9b5eed30-e9a4-4818-a08c-cf9a224a8a06", "row_index": 544, "timestamp": "2019-06-06T13:48:12Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b5eed30-e9a4-4818-a08c-cf9a224a8a06", "eventTime": "2019-06-06T13:48:12Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1faf467b-c7e3-4ecc-ac04-ac7ea095c584", "record_id": "flaws_cloudtrail:0000545:1faf467b-c7e3-4ecc-ac04-ac7ea095c584", "row_index": 545, "timestamp": "2019-06-06T13:48:36Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1faf467b-c7e3-4ecc-ac04-ac7ea095c584", "eventTime": "2019-06-06T13:48:36Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1faf467b-c7e3-4ecc-ac04-ac7ea095c584", "record_id": "flaws_cloudtrail:0000546:1faf467b-c7e3-4ecc-ac04-ac7ea095c584", "row_index": 546, "timestamp": "2019-06-06T13:48:36Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1faf467b-c7e3-4ecc-ac04-ac7ea095c584", "eventTime": "2019-06-06T13:48:36Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f494721d8-371c-4aa4-89b9-7ff7ed056685", "record_id": "flaws_cloudtrail:0000547:f494721d8-371c-4aa4-89b9-7ff7ed056685", "row_index": 547, "timestamp": "2019-06-06T13:49:21Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f494721d8-371c-4aa4-89b9-7ff7ed056685", "eventTime": "2019-06-06T13:49:21Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f494721d8-371c-4aa4-89b9-7ff7ed056685", "record_id": "flaws_cloudtrail:0000548:f494721d8-371c-4aa4-89b9-7ff7ed056685", "row_index": 548, "timestamp": "2019-06-06T13:49:21Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f494721d8-371c-4aa4-89b9-7ff7ed056685", "eventTime": "2019-06-06T13:49:21Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d861758ff-6b62-484c-8ddc-f463c7fae712", "record_id": "flaws_cloudtrail:0000549:d861758ff-6b62-484c-8ddc-f463c7fae712", "row_index": 549, "timestamp": "2019-06-06T13:51:12Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d861758ff-6b62-484c-8ddc-f463c7fae712", "eventTime": "2019-06-06T13:51:12Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d861758ff-6b62-484c-8ddc-f463c7fae712", "record_id": "flaws_cloudtrail:0000550:d861758ff-6b62-484c-8ddc-f463c7fae712", "row_index": 550, "timestamp": "2019-06-06T13:51:12Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d861758ff-6b62-484c-8ddc-f463c7fae712", "eventTime": "2019-06-06T13:51:12Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eaa5a93-2acc-4137-8973-a56bca98cbc2", "record_id": "flaws_cloudtrail:0000551:6eaa5a93-2acc-4137-8973-a56bca98cbc2", "row_index": 551, "timestamp": "2019-06-06T13:53:44Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eaa5a93-2acc-4137-8973-a56bca98cbc2", "eventTime": "2019-06-06T13:53:44Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eaa5a93-2acc-4137-8973-a56bca98cbc2", "record_id": "flaws_cloudtrail:0000552:6eaa5a93-2acc-4137-8973-a56bca98cbc2", "row_index": 552, "timestamp": "2019-06-06T13:53:44Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "2.251.2.5", "user_agent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eaa5a93-2acc-4137-8973-a56bca98cbc2", "eventTime": "2019-06-06T13:53:44Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "2.251.2.5", "userAgent": "aws-cli/1.16.168 Python/3.7.3rc1 Linux/4.19.0-kali3-amd64 botocore/1.12.158", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43f45d93-da68-4b60-b2a8-8b5f319f5b77", "record_id": "flaws_cloudtrail:0000553:43f45d93-da68-4b60-b2a8-8b5f319f5b77", "row_index": 553, "timestamp": "2019-06-06T13:54:03Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA56BCMR5YXN2O8T9N", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "5.9.252.236", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43f45d93-da68-4b60-b2a8-8b5f319f5b77", "eventTime": "2019-06-06T13:54:03Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.9.252.236", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA56BCMR5YXN2O8T9N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-06T12:27:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/06/06/[$LATEST]6120ca2c62ce807e940e82a89e7205dc"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e33f283f-8be6-4f31-845a-ecd1dad1dec3", "record_id": "flaws_cloudtrail:0000554:e33f283f-8be6-4f31-845a-ecd1dad1dec3", "row_index": 554, "timestamp": "2019-06-06T13:54:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1604, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e33f283f-8be6-4f31-845a-ecd1dad1dec3", "eventTime": "2019-06-06T13:54:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMT29N5O58DD9ML4R", "expiration": "Jun 7, 2019 1:54:03 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43f45d93-da68-4b60-b2a8-8b5f319f5b77", "record_id": "flaws_cloudtrail:0000555:43f45d93-da68-4b60-b2a8-8b5f319f5b77", "row_index": 555, "timestamp": "2019-06-06T13:54:03Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA56BCMR5YXN2O8T9N", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "5.9.252.236", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43f45d93-da68-4b60-b2a8-8b5f319f5b77", "eventTime": "2019-06-06T13:54:03Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.9.252.236", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA56BCMR5YXN2O8T9N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-06T12:27:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/06/06/[$LATEST]6120ca2c62ce807e940e82a89e7205dc"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e33f283f-8be6-4f31-845a-ecd1dad1dec3", "record_id": "flaws_cloudtrail:0000556:e33f283f-8be6-4f31-845a-ecd1dad1dec3", "row_index": 556, "timestamp": "2019-06-06T13:54:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1604, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e33f283f-8be6-4f31-845a-ecd1dad1dec3", "eventTime": "2019-06-06T13:54:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMT29N5O58DD9ML4R", "expiration": "Jun 7, 2019 1:54:03 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82d0011c-3748-4252-9f94-99e1eb626c2c", "record_id": "flaws_cloudtrail:0000557:82d0011c-3748-4252-9f94-99e1eb626c2c", "row_index": 557, "timestamp": "2019-06-06T14:08:59Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAMT29N5O58DD9ML4R", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "32.101.124.44", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82d0011c-3748-4252-9f94-99e1eb626c2c", "eventTime": "2019-06-06T14:08:59Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "32.101.124.44", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAMT29N5O58DD9ML4R", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-06T13:54:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/06/06/[$LATEST]bbc05ee69ef20ecdf6bd8d1b912f648a", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82d0011c-3748-4252-9f94-99e1eb626c2c", "record_id": "flaws_cloudtrail:0000558:82d0011c-3748-4252-9f94-99e1eb626c2c", "row_index": 558, "timestamp": "2019-06-06T14:08:59Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAMT29N5O58DD9ML4R", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "32.101.124.44", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82d0011c-3748-4252-9f94-99e1eb626c2c", "eventTime": "2019-06-06T14:08:59Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "32.101.124.44", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAMT29N5O58DD9ML4R", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-06T13:54:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/06/06/[$LATEST]bbc05ee69ef20ecdf6bd8d1b912f648a", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91c722da-d77c-47e5-a681-8ad36d9530dc", "record_id": "flaws_cloudtrail:0000559:91c722da-d77c-47e5-a681-8ad36d9530dc", "row_index": 559, "timestamp": "2019-06-06T14:24:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91c722da-d77c-47e5-a681-8ad36d9530dc", "eventTime": "2019-06-06T14:24:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAF7X957QCCSKRB1T6", "expiration": "Jun 6, 2019 8:56:17 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91c722da-d77c-47e5-a681-8ad36d9530dc", "record_id": "flaws_cloudtrail:0000560:91c722da-d77c-47e5-a681-8ad36d9530dc", "row_index": 560, "timestamp": "2019-06-06T14:24:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91c722da-d77c-47e5-a681-8ad36d9530dc", "eventTime": "2019-06-06T14:24:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAF7X957QCCSKRB1T6", "expiration": "Jun 6, 2019 8:56:17 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64fb551c-aafb-4df9-846c-baf7ae3ce23e", "record_id": "flaws_cloudtrail:0000561:64fb551c-aafb-4df9-846c-baf7ae3ce23e", "row_index": 561, "timestamp": "2019-06-06T14:29:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.250.7", "user_agent": "aws-cli/1.16.169 Python/3.5.3 Linux/4.9.0-9-amd64 botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64fb551c-aafb-4df9-846c-baf7ae3ce23e", "eventTime": "2019-06-06T14:29:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.250.7", "userAgent": "aws-cli/1.16.169 Python/3.5.3 Linux/4.9.0-9-amd64 botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64fb551c-aafb-4df9-846c-baf7ae3ce23e", "record_id": "flaws_cloudtrail:0000562:64fb551c-aafb-4df9-846c-baf7ae3ce23e", "row_index": 562, "timestamp": "2019-06-06T14:29:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.250.7", "user_agent": "aws-cli/1.16.169 Python/3.5.3 Linux/4.9.0-9-amd64 botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64fb551c-aafb-4df9-846c-baf7ae3ce23e", "eventTime": "2019-06-06T14:29:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.250.7", "userAgent": "aws-cli/1.16.169 Python/3.5.3 Linux/4.9.0-9-amd64 botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7656a0fb-21d1-4c1a-a7be-010e02b8bfde", "record_id": "flaws_cloudtrail:0000563:7656a0fb-21d1-4c1a-a7be-010e02b8bfde", "row_index": 563, "timestamp": "2019-06-06T15:00:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA13KQTNZP0ZPJXSR9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "121.223.226.212", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 534, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7656a0fb-21d1-4c1a-a7be-010e02b8bfde", "eventTime": "2019-06-06T15:00:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "121.223.226.212", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA13KQTNZP0ZPJXSR9", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e5725dc-0a30-46d2-ada4-6a5ef996da6d", "record_id": "flaws_cloudtrail:0000564:0e5725dc-0a30-46d2-ada4-6a5ef996da6d", "row_index": 564, "timestamp": "2019-06-06T15:01:04Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA13KQTNZP0ZPJXSR9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "121.223.226.212", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 563, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e5725dc-0a30-46d2-ada4-6a5ef996da6d", "eventTime": "2019-06-06T15:01:04Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "121.223.226.212", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA13KQTNZP0ZPJXSR9", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98f77823-9652-41e0-b27c-08a7428dede7", "record_id": "flaws_cloudtrail:0000565:98f77823-9652-41e0-b27c-08a7428dede7", "row_index": 565, "timestamp": "2019-06-06T15:03:06Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA13KQTNZP0ZPJXSR9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "121.223.226.212", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 573, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98f77823-9652-41e0-b27c-08a7428dede7", "eventTime": "2019-06-06T15:03:06Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "121.223.226.212", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA13KQTNZP0ZPJXSR9", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1654cb76-304a-47d2-81ed-dd2c2c2e7595", "record_id": "flaws_cloudtrail:0000566:1654cb76-304a-47d2-81ed-dd2c2c2e7595", "row_index": 566, "timestamp": "2019-06-06T15:04:48Z", "event_type": "CreateUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA13KQTNZP0ZPJXSR9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "121.223.226.212", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-275"], "raw_record_size_bytes": 647, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1654cb76-304a-47d2-81ed-dd2c2c2e7595", "eventTime": "2019-06-06T15:04:48Z", "eventName": "CreateUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "121.223.226.212", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA13KQTNZP0ZPJXSR9", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-275"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-275"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7db7113b-3070-4d6a-aa0e-a24e30115439", "record_id": "flaws_cloudtrail:0000567:7db7113b-3070-4d6a-aa0e-a24e30115439", "row_index": 567, "timestamp": "2019-06-06T15:05:12Z", "event_type": "CreateAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA13KQTNZP0ZPJXSR9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "121.223.226.212", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-275"], "raw_record_size_bytes": 652, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7db7113b-3070-4d6a-aa0e-a24e30115439", "eventTime": "2019-06-06T15:05:12Z", "eventName": "CreateAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "121.223.226.212", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA13KQTNZP0ZPJXSR9", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-275"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-275"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f210bb9c-e950-4e23-ba50-0293e666680d", "record_id": "flaws_cloudtrail:0000568:f210bb9c-e950-4e23-ba50-0293e666680d", "row_index": 568, "timestamp": "2019-06-06T15:05:56Z", "event_type": "AttachUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA13KQTNZP0ZPJXSR9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "121.223.226.212", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-275", "arn:aws:iam::aws:policy/AmazonS3FullAccess"], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f210bb9c-e950-4e23-ba50-0293e666680d", "eventTime": "2019-06-06T15:05:56Z", "eventName": "AttachUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "121.223.226.212", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA13KQTNZP0ZPJXSR9", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-275", "policyArn": "arn:aws:iam::aws:policy/AmazonS3FullAccess"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-275"}, {"ARN": "arn:aws:iam::aws:policy/AmazonS3FullAccess"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ccf8fa5-446c-4de1-93d2-48345ca", "record_id": "flaws_cloudtrail:0000569:6ccf8fa5-446c-4de1-93d2-48345ca", "row_index": 569, "timestamp": "2019-06-06T15:24:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1866, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ccf8fa5-446c-4de1-93d2-48345ca", "eventTime": "2019-06-06T15:24:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAT0SQV4F3SRB2HMQZ", "expiration": "Jun 6, 2019 9:31:34 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ccf8fa5-446c-4de1-93d2-48345ca", "record_id": "flaws_cloudtrail:0000570:6ccf8fa5-446c-4de1-93d2-48345ca", "row_index": 570, "timestamp": "2019-06-06T15:24:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1866, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ccf8fa5-446c-4de1-93d2-48345ca", "eventTime": "2019-06-06T15:24:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAT0SQV4F3SRB2HMQZ", "expiration": "Jun 6, 2019 9:31:34 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e26595c-4cc4-42e7-a4ae-ce855125be82", "record_id": "flaws_cloudtrail:0000571:6e26595c-4cc4-42e7-a4ae-ce855125be82", "row_index": 571, "timestamp": "2019-06-06T15:47:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e26595c-4cc4-42e7-a4ae-ce855125be82", "eventTime": "2019-06-06T15:47:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e26595c-4cc4-42e7-a4ae-ce855125be82", "record_id": "flaws_cloudtrail:0000572:6e26595c-4cc4-42e7-a4ae-ce855125be82", "row_index": 572, "timestamp": "2019-06-06T15:47:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e26595c-4cc4-42e7-a4ae-ce855125be82", "eventTime": "2019-06-06T15:47:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58147dc5-458f-4fec-803b-dfa053a5d556", "record_id": "flaws_cloudtrail:0000573:58147dc5-458f-4fec-803b-dfa053a5d556", "row_index": 573, "timestamp": "2019-06-06T15:47:21Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58147dc5-458f-4fec-803b-dfa053a5d556", "eventTime": "2019-06-06T15:47:21Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58147dc5-458f-4fec-803b-dfa053a5d556", "record_id": "flaws_cloudtrail:0000574:58147dc5-458f-4fec-803b-dfa053a5d556", "row_index": 574, "timestamp": "2019-06-06T15:47:21Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58147dc5-458f-4fec-803b-dfa053a5d556", "eventTime": "2019-06-06T15:47:21Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c5ae5d8-e278-4595-8461-c4f4df980ca2", "record_id": "flaws_cloudtrail:0000575:8c5ae5d8-e278-4595-8461-c4f4df980ca2", "row_index": 575, "timestamp": "2019-06-06T15:50:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c5ae5d8-e278-4595-8461-c4f4df980ca2", "eventTime": "2019-06-06T15:50:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c5ae5d8-e278-4595-8461-c4f4df980ca2", "record_id": "flaws_cloudtrail:0000576:8c5ae5d8-e278-4595-8461-c4f4df980ca2", "row_index": 576, "timestamp": "2019-06-06T15:50:48Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c5ae5d8-e278-4595-8461-c4f4df980ca2", "eventTime": "2019-06-06T15:50:48Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d153f49-27f6-4ed4-93ee-8bab06a8dd63", "record_id": "flaws_cloudtrail:0000577:7d153f49-27f6-4ed4-93ee-8bab06a8dd63", "row_index": 577, "timestamp": "2019-06-06T15:50:53Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d153f49-27f6-4ed4-93ee-8bab06a8dd63", "eventTime": "2019-06-06T15:50:53Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d153f49-27f6-4ed4-93ee-8bab06a8dd63", "record_id": "flaws_cloudtrail:0000578:7d153f49-27f6-4ed4-93ee-8bab06a8dd63", "row_index": 578, "timestamp": "2019-06-06T15:50:53Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d153f49-27f6-4ed4-93ee-8bab06a8dd63", "eventTime": "2019-06-06T15:50:53Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b2fb109-f202-4359-94d7-771520a8eadee", "record_id": "flaws_cloudtrail:0000579:2b2fb109-f202-4359-94d7-771520a8eadee", "row_index": 579, "timestamp": "2019-06-06T15:54:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b2fb109-f202-4359-94d7-771520a8eadee", "eventTime": "2019-06-06T15:54:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b2fb109-f202-4359-94d7-771520a8eadee", "record_id": "flaws_cloudtrail:0000580:2b2fb109-f202-4359-94d7-771520a8eadee", "row_index": 580, "timestamp": "2019-06-06T15:54:49Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b2fb109-f202-4359-94d7-771520a8eadee", "eventTime": "2019-06-06T15:54:49Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a76506c2-96c5-4443-b63f-533a72682870", "record_id": "flaws_cloudtrail:0000581:a76506c2-96c5-4443-b63f-533a72682870", "row_index": 581, "timestamp": "2019-06-06T15:55:47Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a76506c2-96c5-4443-b63f-533a72682870", "eventTime": "2019-06-06T15:55:47Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a76506c2-96c5-4443-b63f-533a72682870", "record_id": "flaws_cloudtrail:0000582:a76506c2-96c5-4443-b63f-533a72682870", "row_index": 582, "timestamp": "2019-06-06T15:55:47Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a76506c2-96c5-4443-b63f-533a72682870", "eventTime": "2019-06-06T15:55:47Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8b6c267-6b26-4d46-bce6-712f8b594b5e", "record_id": "flaws_cloudtrail:0000583:d8b6c267-6b26-4d46-bce6-712f8b594b5e", "row_index": 583, "timestamp": "2019-06-06T15:56:56Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8b6c267-6b26-4d46-bce6-712f8b594b5e", "eventTime": "2019-06-06T15:56:56Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8b6c267-6b26-4d46-bce6-712f8b594b5e", "record_id": "flaws_cloudtrail:0000584:d8b6c267-6b26-4d46-bce6-712f8b594b5e", "row_index": 584, "timestamp": "2019-06-06T15:56:56Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8b6c267-6b26-4d46-bce6-712f8b594b5e", "eventTime": "2019-06-06T15:56:56Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "873925e-ff6b-4af5-ad0a-2c21844243f8", "record_id": "flaws_cloudtrail:0000585:873925e-ff6b-4af5-ad0a-2c21844243f8", "row_index": 585, "timestamp": "2019-06-06T15:57:19Z", "event_type": "GetFunctionConfiguration202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "873925e-ff6b-4af5-ad0a-2c21844243f8", "eventTime": "2019-06-06T15:57:19Z", "eventName": "GetFunctionConfiguration202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunctionConfiguration on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "873925e-ff6b-4af5-ad0a-2c21844243f8", "record_id": "flaws_cloudtrail:0000586:873925e-ff6b-4af5-ad0a-2c21844243f8", "row_index": 586, "timestamp": "2019-06-06T15:57:19Z", "event_type": "GetFunctionConfiguration202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 910, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "873925e-ff6b-4af5-ad0a-2c21844243f8", "eventTime": "2019-06-06T15:57:19Z", "eventName": "GetFunctionConfiguration202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunctionConfiguration on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ab132b7-12c6-4021-a280-be8e9b026c51", "record_id": "flaws_cloudtrail:0000587:1ab132b7-12c6-4021-a280-be8e9b026c51", "row_index": 587, "timestamp": "2019-06-06T15:57:28Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ab132b7-12c6-4021-a280-be8e9b026c51", "eventTime": "2019-06-06T15:57:28Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ab132b7-12c6-4021-a280-be8e9b026c51", "record_id": "flaws_cloudtrail:0000588:1ab132b7-12c6-4021-a280-be8e9b026c51", "row_index": 588, "timestamp": "2019-06-06T15:57:28Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ab132b7-12c6-4021-a280-be8e9b026c51", "eventTime": "2019-06-06T15:57:28Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "beb10f42-849d-483d-8648-54777a30b89b", "record_id": "flaws_cloudtrail:0000589:beb10f42-849d-483d-8648-54777a30b89b", "row_index": 589, "timestamp": "2019-06-06T15:58:12Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "beb10f42-849d-483d-8648-54777a30b89b", "eventTime": "2019-06-06T15:58:12Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "beb10f42-849d-483d-8648-54777a30b89b", "record_id": "flaws_cloudtrail:0000590:beb10f42-849d-483d-8648-54777a30b89b", "row_index": 590, "timestamp": "2019-06-06T15:58:12Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "beb10f42-849d-483d-8648-54777a30b89b", "eventTime": "2019-06-06T15:58:12Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d628f83c-4762-4785-a67c-9ab4a50c326b", "record_id": "flaws_cloudtrail:0000591:d628f83c-4762-4785-a67c-9ab4a50c326b", "row_index": 591, "timestamp": "2019-06-06T15:59:36Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d628f83c-4762-4785-a67c-9ab4a50c326b", "eventTime": "2019-06-06T15:59:36Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d628f83c-4762-4785-a67c-9ab4a50c326b", "record_id": "flaws_cloudtrail:0000592:d628f83c-4762-4785-a67c-9ab4a50c326b", "row_index": 592, "timestamp": "2019-06-06T15:59:36Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d628f83c-4762-4785-a67c-9ab4a50c326b", "eventTime": "2019-06-06T15:59:36Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5776d071-b6fb-48b2-94f9-736a120c1dcc", "record_id": "flaws_cloudtrail:0000593:5776d071-b6fb-48b2-94f9-736a120c1dcc", "row_index": 593, "timestamp": "2019-06-06T16:00:14Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5776d071-b6fb-48b2-94f9-736a120c1dcc", "eventTime": "2019-06-06T16:00:14Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5776d071-b6fb-48b2-94f9-736a120c1dcc", "record_id": "flaws_cloudtrail:0000594:5776d071-b6fb-48b2-94f9-736a120c1dcc", "row_index": 594, "timestamp": "2019-06-06T16:00:14Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5776d071-b6fb-48b2-94f9-736a120c1dcc", "eventTime": "2019-06-06T16:00:14Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42d7af1b-cc2f-41cc-92ca-bdeb4192a025", "record_id": "flaws_cloudtrail:0000595:42d7af1b-cc2f-41cc-92ca-bdeb4192a025", "row_index": 595, "timestamp": "2019-06-06T16:24:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42d7af1b-cc2f-41cc-92ca-bdeb4192a025", "eventTime": "2019-06-06T16:24:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA47HM9Z12N6XBZ01H", "expiration": "Jun 6, 2019 10:46:51 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42d7af1b-cc2f-41cc-92ca-bdeb4192a025", "record_id": "flaws_cloudtrail:0000596:42d7af1b-cc2f-41cc-92ca-bdeb4192a025", "row_index": 596, "timestamp": "2019-06-06T16:24:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1871, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42d7af1b-cc2f-41cc-92ca-bdeb4192a025", "eventTime": "2019-06-06T16:24:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA47HM9Z12N6XBZ01H", "expiration": "Jun 6, 2019 10:46:51 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "688b0286-9160-4ae5-8bfc-f06c190012c7", "record_id": "flaws_cloudtrail:0000597:688b0286-9160-4ae5-8bfc-f06c190012c7", "row_index": 597, "timestamp": "2019-06-06T16:40:45Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "688b0286-9160-4ae5-8bfc-f06c190012c7", "eventTime": "2019-06-06T16:40:45Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "688b0286-9160-4ae5-8bfc-f06c190012c7", "record_id": "flaws_cloudtrail:0000598:688b0286-9160-4ae5-8bfc-f06c190012c7", "row_index": 598, "timestamp": "2019-06-06T16:40:45Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "688b0286-9160-4ae5-8bfc-f06c190012c7", "eventTime": "2019-06-06T16:40:45Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39753c-7541-4873-9a47-5741cdb96c0b", "record_id": "flaws_cloudtrail:0000599:39753c-7541-4873-9a47-5741cdb96c0b", "row_index": 599, "timestamp": "2019-06-06T16:41:38Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39753c-7541-4873-9a47-5741cdb96c0b", "eventTime": "2019-06-06T16:41:38Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39753c-7541-4873-9a47-5741cdb96c0b", "record_id": "flaws_cloudtrail:0000600:39753c-7541-4873-9a47-5741cdb96c0b", "row_index": 600, "timestamp": "2019-06-06T16:41:38Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39753c-7541-4873-9a47-5741cdb96c0b", "eventTime": "2019-06-06T16:41:38Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "232609-14a1-42d0-ac23-96d45ea848c3", "record_id": "flaws_cloudtrail:0000601:232609-14a1-42d0-ac23-96d45ea848c3", "row_index": 601, "timestamp": "2019-06-06T16:42:05Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "232609-14a1-42d0-ac23-96d45ea848c3", "eventTime": "2019-06-06T16:42:05Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "232609-14a1-42d0-ac23-96d45ea848c3", "record_id": "flaws_cloudtrail:0000602:232609-14a1-42d0-ac23-96d45ea848c3", "row_index": 602, "timestamp": "2019-06-06T16:42:05Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "254.254.167.250", "user_agent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "232609-14a1-42d0-ac23-96d45ea848c3", "eventTime": "2019-06-06T16:42:05Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.254.167.250", "userAgent": "aws-cli/1.14.41 Python/2.7.13 Linux/4.9.0-5-amd64 botocore/1.8.45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef6d313d-a32b-45df-84dc-21c0a782eaa1", "record_id": "flaws_cloudtrail:0000603:ef6d313d-a32b-45df-84dc-21c0a782eaa1", "row_index": 603, "timestamp": "2019-06-06T16:44:54Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIANB67Q3I772X4XTDK", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "153.7.1.168", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef6d313d-a32b-45df-84dc-21c0a782eaa1", "eventTime": "2019-06-06T16:44:54Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.7.1.168", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIANB67Q3I772X4XTDK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-06-06T16:44:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/06/06/[$LATEST]19b3184ee1da6cd1bf44311590bb3dcf"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "befc0de2-5d2b-4862-ab98-70cd545480", "record_id": "flaws_cloudtrail:0000604:befc0de2-5d2b-4862-ab98-70cd545480", "row_index": 604, "timestamp": "2019-06-06T16:44:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1598, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "befc0de2-5d2b-4862-ab98-70cd545480", "eventTime": "2019-06-06T16:44:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIANB67Q3I772X4XTDK", "expiration": "Jun 7, 2019 4:44:54 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3de167f8-81a9-4179-b30e-8cbb33d962c4", "record_id": "flaws_cloudtrail:0000605:3de167f8-81a9-4179-b30e-8cbb33d962c4", "row_index": 605, "timestamp": "2019-06-06T16:44:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1605, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3de167f8-81a9-4179-b30e-8cbb33d962c4", "eventTime": "2019-06-06T16:44:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPXGZOGAF80EN6IFS", "expiration": "Jun 7, 2019 4:44:54 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}